Latent harm monitors match model refusal performance at matched false alarm rates
October 23, 2026
Latent safety monitors based on internal activations perform no better than standard classifiers or the models' own refusal behavior. Testing across 15 LLMs shows that these monitors do not provide a signal of harm that is independent of the model's outward behavior.
HOW THIS AFFECTS YOU
●
builderYou may find that monitoring internal activations is not a superior alternative to standard safety classifiers.
●
policyThis suggests that internal latent monitors might not reliably catch intent that bypasses standard refusal mechanisms.