Minimal, Local, Causal Explanations for Jailbreak Success in Large Language Models

Researchers introduce LOCA, a method for providing local, causal explanations of why specific jailbreak attacks succeed against safety-trained LLMs. Rather than globally explaining all jailbreaks as modifying the same concepts, LOCA identifies minimal sets of interpretable representation changes that causally induce model refusal on individual jailbreak attempts.