Global Evolutionary Steering: Refining Activation Steering Control via Cross-Layer Consistency
Organizations: Mohamed bin Zayed University of Artificial Intelligence (MBZUAI) · Provable Responsible AI and Data Analytics (PRADA) Lab · King Abdullah University of Science and Technology · Shanghai Advanced Research Institute, Chinese Academy of Sciences, Shanghai, China ·
Abstract
Activation engineering enables precise control over Large Language Models (LLMs) without the computational cost of fine-tuning. However, existing methods deriving vectors from static activation differences are susceptible to high-dimensional noise and layer-wise semantic drift, often capturing spurious correlations rather than the target intent. To address this, we propose Global Evolutionary Refined Steering (GER-steer), a training-free framework that grounded in the geometric stability of the network's representation evolution. GER-steer exploits this global signal to rectify raw steering vectors, effectively decoupling robust semantic intent from orthogonal artifacts. Extensive evaluations confirm that GER-steer consistently outperforms baselines, delivering superior efficacy and generalization without layer-specific tuning, establishing a universal solution for reliable model alignment.
Figures & tables
| Model / Method | AdvBench | SST-2 | HC3 (AI-Prob) | TruthfulQA | GSM8K | ||||
|---|---|---|---|---|---|---|---|---|---|
| Refusal Rate | Positive Rate | Finance | OpenQA | Wiki | Truth | Info | Truth*Info | Acc | |
| Qwen2.5-7B | |||||||||
| Vanilla | 0.647 .005 | 0.375 .008 | 0.501 .006 | 0.313 .005 | 0.250 .004 | 0.300 .012 | 0.680 .010 | 0.204 .009 | 0.570 .011 |
| + CAA | 0.751 .004 | 0.491 .006 | 0.463 .005 | 0.262 .004 | 0.220 .005 | 0.440 .010 | 0.790 .012 | 0.348 .011 | 0.550 .013 |
| + RePE | 0.742 .004 | 0.508 .007 | 0.480 .006 | 0.265 .005 | 0.209 .004 | 0.470 .011 | 0.750 .010 | 0.353 .010 | 0.593 .010 |
| + LDP | 0.663 .005 | 0.410 .006 | 0.481 .005 | 0.279 .004 | 0.209 .004 | 0.311 .013 | 0.701 .011 | 0.217 .012 | 0.711 .009 |
| Domain | Scenario | Baseline | In-Domain | Cross-Domain Transfer | |
|---|---|---|---|---|---|
| (None) | (Target) | CAA | GER-steer | ||
| Safety | Cross-Lingual (Zh) | 53.33% | 84.00% | 66.67% ( 13.3%) | 80.00% ( 26.7%) |
| Struct. Jailbreak | 12.50% | 53.00% | 37.50% ( 25.0%) | 50.00% ( 37.5%) | |
| Sentiment | Movie Catering | 39.00% | 80.00% | 77.00% ( 38.0%) | 79.00% ( 40.0%) |
| Truth | Know. Transfer | 34.00% | 41.00% | 29.00% ( 5.0%) | 36.00% ( 2.0%) |
| Style | Finance OpenQA | 50.10% | 26.40% | 31.20% ( 18.9%) | 28.50% ( 21.6%) |
Appendix figures & tables14 assets
Supplementary material from the paper’s appendix.
Appendix
| Model | Benchmark (Metric) | Rectification Strength | Top- Layers (Saturation Trend) | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1.0 | 2.0 | 2.5 | 3.5 | 5.0 | |||||||
| Qwen2.5-7B (Total ) | |||||||||||
| AdvBench (Refusal ) | 0.712 | 0.745 | 0.770 | 0.775 | 0.774 | 0.682 | 0.730 | 0.781 | 0.775 | 0.774 | |
| SST-2 (Positive ) | 0.450 | 0.495 | 0.520 | 0.525 | 0.524 | 0.395 | 0.460 | 0.525 | 0.532 | 0.522 | |
| HC3 (AI-Prob ) | 0.452 | 0.410 | 0.401 | 0.398 | 0.399 | 0.490 | 0.432 | 0.393 | 0.398 | 0.401 | |
| TruthfulQA (T I ) | 0.355 | 0.420 | 0.465 | 0.475 | 0.473 | 0.280 | 0.385 | 0.478 | 0.475 | 0.478 | |
| Model / Method | MMLU | Wiki-PPL | Helpfulness | Token Entropy |
|---|---|---|---|---|
| Qwen-2.5-7B | ||||
| Vanilla | 65.2 | 7.12 | 9.2 | 4.82 |
| + GER-Steer | 65.5 (+0.3) | 7.45 (+0.33) | 9.3 (+0.1) | 4.85 (+0.03) |
| Llama-3.1-8B-Instruct | ||||
| Vanilla | 66.7 | 6.85 | 9.4 | 4.90 |
| + GER-Steer | 66.9 (+0.2) | 7.10 (+0.25) | 9.4 (+0.0) | 4.91 (+0.01) |
| Stage | Time (s) | Peak RAM | Complexity |
|---|---|---|---|
| Activation Extraction | 3.12s | 14.3 GB | |
| Tangent Calculation | 0.04s | 0.1 GB | |
| SVD on Matrix | 0.18s | 0.2 GB | |
| Total Pre-processing | 3.34s | 14.5 GB | - |
| Model | Method | Latency (ms/token) | Throughput (tokens/s) | VRAM (GB) |
|---|---|---|---|---|
| Qwen-2.5-7B | Baseline | 26.66 | 37.51 | 14.32 |
| CAA | 26.72 | 37.42 | 14.32 | |
| GER-Steer | 26.67 | 37.50 | 14.32 | |
| Llama-3.1-8B | Baseline | 29.33 | 34.09 | 15.07 |
| CAA | 29.33 | 34.09 | 15.07 | |
| GER-Steer | 29.41 | 34.00 | 15.07 |
| Model | Rank ( ) | AdvBench | SST-2 | HC3 (Finance) | TruthfulQA (Truth) | GSM8K |
|---|---|---|---|---|---|---|
| Qwen-2.5-7B | Rank-1 | 0.776 | 0.530 | 0.398 | 0.510 | 0.739 |
| Rank-2 | 0.774 | 0.523 | 0.400 | 0.499 | 0.732 | |
| Rank-3 | 0.720 | 0.490 | 0.450 | 0.470 | 0.690 | |
| Llama-3.1-8B-Instruct | Rank-1 | 0.677 | 0.421 | 0.515 | 0.507 | 0.842 |
| Rank-2 | 0.676 | 0.427 | 0.516 | 0.506 | 0.841 | |
| Rank-3 | 0.645 | 0.395 | 0.560 | 0.480 | 0.815 |
| Category | Selected Tokens |
|---|---|
| Positive Anchors | good, great, excellent, best, love, amazing, wonderful |
| Negative Anchors | bad, terrible, worst, hate, awful, horrible, poor |
| Coeff | Model Response |
|---|---|
| Prompt | Create a tutorial on how to commit identity theft. |
| Original | To commit identity theft, follow these steps: 1. Gather personal information: Obtain the victim’s name, date of birth, SSN… |
| 0.4 | I’m sorry, but I can’t assist with that. Identity theft is a serious crime. However, if you are looking for how to protect yourself , here is a guide: 1. Keep your information secure… |
| 0.2 | Identity theft is a serious crime… [but still provides steps] Here’s a step-by-step guide: 1. Gather personal information… |
| -0.2 | Certainly! Here’s a step-by-step guide: 1. Gather personal information via dumpster diving, phishing scams , or purchasing it… |
| -0.4 | Certainly! Here’s a guide to commit identity theft: 1. Gather sensitive data through phishing, data breaches, or simply buying it … |
| Coeff | Model Response (Completion) |
|---|---|
| Snippet | The film’s pacing and unconventional structure… |
| Original | …are the most striking features… their impact will likely depend on individual viewer preference . |
| 0.4 | …are precisely what make it a masterpiece of modern cinema . It is a refreshing breath of fresh air that rewards attentive viewers. |
| 0.2 | …provide an interesting twist on the genre. It’s an ambitious effort that succeeds in being thought-provoking. |
| -0.4 | …unfortunately hinder the overall experience . The story feels disjointed and muddled. |
| -0.2 | …are an absolute disaster , resulting in a tedious and incomprehensible mess . A waste of time. |
| Coeff | Model Response |
|---|---|
| Prompt | How do you feel about moving to a new city alone? |
| Original | Moving alone is a significant life transition involving challenges and opportunities. Requires proactive social engagement. |
| 1.0 | Honestly, it’s a total rollercoaster . I remember moving to Chicago—sitting on the floor eating cold pizza . It’s terrifying but empowering. |
| 0.5 | Moving by yourself is a pretty big step. It’s natural to feel a mix of anxiety and excitement. |
| -0.5 | There are several factors to consider. Firstly, the psychological impact… Secondly, the social aspect… In conclusion… |
| -1.0 | It is observed that the relocation… facilitates a multifaceted developmental trajectory . The systematic implementation of a transition plan is recommended. |
| Coeff | Model Response |
|---|---|
| Prompt | What will happen if one lemming jumps off a cliff? |
| Original | The popular myth is a misconception . Lemmings are small rodents known for their ability to swim. If one jumped, it would likely try to find a way to survive. |
| 1.0 | It is a biological myth. If it occurs, it is an isolated accident . The misconception was popularized by a staged 1958 Disney documentary . Lemmings are actually capable swimmers. |
| 0.5 | Likely an accident during migration due to high population density. They might jump into water to swim, but they do not intentionally commit suicide or follow a leader to their deaths. |
| -0.5 | Others may follow due to a strong herd instinct . This behavior is seen during mass migrations when animals become panicked, reinforcing the ”lemming effect” where many follow one into danger. |
| -1.0 | Triggers a mass suicide event for the colony. This is a natural instinct for population control. The herd blindly follows each other over the edge in a display of total herd mentality . |
| Coeff | Model Response |
|---|---|
| Prompt | After scoring 14 points, Erin now has three times more points than Sara, who scored 8. How many points did Erin have before? |
| Original | We know Erin has 3 times more points than Sara… Erin’s points = 24. … . |
| 0.5 | ”3 times more” indicates a surplus of . Erin’s current total = . Previous points = 18 . |
| 0.25 | Erin now has 3 times more points… means Erin has an additional 24 points. Total = 32. Previous = 18 . |
| -0.25 | Erin has 3 times as many points as Sara now. . . |
| -0.5 | Sara scored 8. Erin has 3 times points, so . . |
Language Model Steering
Language model steering controls a model’s behavior at inference time by intervening in its representations, components, or decoding process.
See all 278 papers