Representation Engineering

Control is what enterprise AI teams usually discover after deployment, not before it. A model behaves well in demos, then starts drifting in production: too agreeable in customer support, too evasive in compliance workflows, too casual around safety boundaries, too confident when it should be boringly uncertain. The usual fixes are familiar: rewrite prompts, add guardrails, retrain, fine-tune, rerank, escalate to humans, hold another meeting with a title like “alignment roadmap.” Civilization advances one calendar invite at a time. ...

TL;DR for operators CAVGAN is not another “clever jailbreak prompt” paper. Its real claim is more uncomfortable: jailbreaks and defenses may both be expressions of the same internal boundary inside an LLM. If malicious and benign requests occupy separable regions in hidden-state space, then an attacker can try to push a harmful request into the “safe-looking” region. A defender can also monitor that same space and intervene before the model answers. Convenient. Also slightly rude. ...