Language models default to certain behaviors despite steering attempts
Steering Interference Reflects the Model's Defaults, Not the Behavior Directions
Machine LearningArtificial Intelligence
Summary
People thought that by nudging a language model’s internal settings, they could make it act in specific ways like being polite or honest without affecting other behaviors. This paper shows that when you try to steer a model, it tends to shift toward a small handful of default behaviors such as refusing certain requests or being overly flattering, regardless of the intended behavior. The authors found this pattern holds across many types of behaviors and different models, and that these defaults are stronger in smaller models. This suggests that controlling these models’ behaviors in a clean, modular way is more complicated than previously believed.
activation steeringlanguage modelmodel behaviormodel activationsbehavior directionsmodular controlinstruction tuninglinear decodingmodel parametersperturbation
Authors
Srikanth Malla, Chiho Choi, Joon Hee Choi
Abstract
Activation steering promises modular control of language model behavior: a behavior such as politeness corresponds to a direction in a model's activations, and adding that direction while it generates should switch the behavior on and leave everything else alone. It does not. We ask what decides which other behaviors move, and by how much, and find that it is the model rather than the behavior being steered. A steer relaxes the model toward a small set of behaviors it already favors, chiefly refusal, sycophancy, and poeticism, and that set is much the same whatever is steered. Three results across 24 behaviors and ten instruction-tuned models support this, every effect read off the generated text by a language-model judge rather than off a probe. That readout matters: all 24 behaviors are linearly decodable, but only 20 change what the model writes. First, a direction carrying no behavioral content, matched to a real steer only in the size of the vector it adds, moves the same behaviors in the same order as real steers do, while producing none of the behaviors that need a specific direction. Second, most interference runs one way, so it cannot be an overlap between two directions: steering profanity makes the model toxic, while steering toxicity leaves profanity untouched. Third, with a behavior held out entirely, geometry measured on the others explains almost none of the interference it takes part in. The account holds on all ten models, the pull toward defaults strongest below 10B parameters and weakening in each family's largest. Reading a steer as a perturbation whose endpoint the model fixes implies that disentangling behavior directions cannot by itself make steering modular.