🤖 AI Summary
This work investigates how to steer large language model (LLM) behavior *during inference only*, with zero computational overhead, via Contrastive Activation Engineering (CAE). We propose constructing steering vectors from activation differences between contrasting behavioral states, augmented by multi-sample statistical aggregation and distributional robustness analysis to rigorously characterize CAE’s efficacy boundaries—both in-distribution (ID) and out-of-distribution (OOD). Our empirical study is the first to identify CAE’s sample-efficiency threshold (~80 samples), expose its adversarial fragility, quantify its detrimental impact on perplexity, and reveal LLMs’ relative robustness to CAE-induced degradation. Based on these findings, we distill five practical deployment guidelines, clarifying that CAE is strictly applicable to ID tasks. Results demonstrate that CAE is an efficient yet fundamentally constrained behavioral control technique, whose reliability critically depends on distributional consistency between steering and deployment contexts.
📝 Abstract
Controlling the behavior of Large Language Models (LLMs) remains a significant challenge due to their inherent complexity and opacity. While techniques like fine-tuning can modify model behavior, they typically require extensive computational resources. Recent work has introduced a class of contrastive activation engineering (CAE) techniques as promising approaches for steering LLM outputs through targeted modifications to their internal representations. Applied at inference-time with zero cost, CAE has the potential to introduce a new paradigm of flexible, task-specific LLM behavior tuning. We analyze the performance of CAE in in-distribution, out-of-distribution settings, evaluate drawbacks, and begin to develop comprehensive guidelines for its effective deployment. We find that 1. CAE is only reliably effective when applied to in-distribution contexts. 2. Increasing the number of samples used to generate steering vectors has diminishing returns at around 80 samples. 3. Steering vectors are susceptible to adversarial inputs that reverses the behavior that is steered for. 4. Steering vectors harm the overall model perplexity. 5. Larger models are more resistant to steering-induced degradation.