SafetyEdit Targets Sparse MLP Coordinates to Prevent LLM Jailbreaks

SafetyEdit mitigates LLM jailbreak backdoors by targeting sparse internal MLP coordinates rather than just output prefixes. By focusing on dense, high-dimensional compliance directions in latent space, the method maintains model utility while improving resistance to prompt-wide hijacking.