Latent State Probes Detect Harm with Minimal Compute Overhead

Small 12.6M parameter MLP probes trained on LLaMA-3.1-8B activations can detect harmful prompts with up to 99% F1 score on WildJailbreak. This approach replaces large external guardrail models, significantly reducing inference latency and compute costs.