Faithful Latent Harm Monitors Work No Better Than the Models Own Behaviour at a Matched False Alarm Rate.

arXiv:2610.30727v1 Announce Type: new Abstract: Large language models have been reported to encode the harmfulness of a request separately from their decision to refuse it, and latent safety monitors such as Latent Guard build on this report by classifying pro