SAE interventions found unreliable for safety control in new evaluations

Two Arxiv papers demonstrate that sparse autoencoder (SAE) feature interventions often fail to localize safety-relevant behavior, with suppressed behavior recovering post-intervention. The studies introduce matched evaluation baselines revealing that apparent success can stem from weak interventions or model robustness, challenging latent-space safety defenses.