新智元 (微信公众号)T2·72 pts
- Risk suppression is achieved by intervening on only 10 hidden dimensions in a single layer, with base model weights frozen throughout
- Current-step risk detection averages 97.32% accuracy across three tested models
- For multi-turn long-horizon tasks, safety judgment must combine task goals, action history and environment feedback rather than only initial command review