Paper recorded by Signals 4 on 2026-10-07 in cs.CL. Abstract reproduced from arXiv; link to the original below.
Published 2026-10-07 on arXiv · recorded by Signals 4 on 2026-10-08
Category: cs.CL · 自然语言处理 · first seen 2026-10-08
An LLM safety patch can pass a benchmark while still being a poor repair. This risk is especially acute for jailbreak repairs, where the goal is to correct a specific unsafe behaviour without changing unrelated behaviours. A patch may block exact evaluation prompts yet fail on close harmful variants, or suppress harmful behaviour by over-refusing benign prompts that share its wording or structure.