Steering Reasoning via Counter-Aligned Few-Shot Conversations (SRCF)

Large Reasoning Models are vulnerable to steering attacks where prepended counter-aligned few-shot conversations with CoT traces induce representation drift. This allows attackers to trigger unsafe generations or unwarranted refusals through a standard conversational interface without parameter access.