NeurIPS paper: first-token probability distributions hold transferable safety signals to block jailbreaks

mohitban47 · x · 2026-10-08

A NeurIPS paper shows LLMs' first-token probability distributions contain latent safety signals that can flag harmful queries before generation and transfer across models. The authors build LADE, a model-agnostic jailbreak defense requiring no access to internal hidden states.

Related event: NeurIPS Paper Unveils Cross-Model Safety Signals in First-Token Probability Distributions(2 posts)→

Original post →

More from Safety

Safety channel →