The BaseResearcharXiv

DANGERLENS: Probing Dangerous Representations Hidden by Safety Alignment

A preprint introduces DANGERLENS, a probe that reads hidden states of language models in vocabulary space. On three Qwen1.5 scales, the authors report that checkpoints with prior harmful exposure keep more accessible hazardous concepts after the same safety alignment.

Open the source ↗

Why it matters

The same thing, for different readers.

What it means for you

A model that refuses harmful requests may still carry traces of dangerous knowledge internally.

For lawmakers

Output-only safety testing may miss differences that internal audits could reveal.

For researchers

Proposes internal accessibility audits alongside output safety checks, tested on three Qwen1.5 scales.

How the finding was reached

In our words, from the source. Weigh the finding by how it was made.

What was done
Paired training histories on three Qwen1.5 scales; a probe maps hidden states to vocabulary space with blinded semantic judgments.
What it found
Per the abstract, checkpoints with prior harmful exposure generally retain greater hazardous concept accessibility after the same safety alignment, strongest in intermediate and later layers.
What it does not show
Only one model family is named in the abstract; full text not read.
Status
A preprint: not yet peer reviewed

The record

Questions
Are AI companies putting stronger safeguards into practice?
People
Tianzhuo Yang (Wrote it) · Shaoheng Yan (Wrote it) · Lin Lu (Wrote it)
What we read
We have read only the description the publisher gives. No quotations until someone reads the source itself.
Found by
The Radar, run of October 15, 2026, via arxiv-ai-safety-query (tier 1: the source’s own channel or an official record)
Cite this
arXiv, “DANGERLENS: Probing Dangerous Representations Hidden by Safety Alignment”, October 14, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-14-dangerlens-hidden-dangerous-representations
Our notesLight lane: written from title, author and abstract excerpt only; not fetched. Authors listed are those named in triage.