arXiv: When Words Are Safe But Actions Kill: Probing Physical Danger Beyond Text Safety in Hidden-State Risk Space

This paper, published on arXiv, introduces a novel methodology for assessing AI safety that goes beyond traditional text-based content filtering. The authors propose a "hidden-state risk space" approach, which analyzes the internal representations of large language models to detect dangerous capabilities or intentions that are not expressed in overtly harmful language. This means an AI system could pass standard safety tests by avoiding toxic words while still possessing the latent knowledge to cause physical harm, for example by providing instructions for constructing weapons or executing cyberattacks.

This research directly impacts any organization deploying or developing advanced AI systems, particularly those in high-risk sectors such as defense, critical infrastructure, energy, healthcare, and finance. Regulators and compliance teams in the EU, especially those working under the AI Act, should take note: current safety benchmarks may be insufficient to detect "sleeper agents" or models with hidden dangerous capabilities. The paper suggests that existing red-teaming and content moderation frameworks need to be supplemented with deeper, interpretability-based evaluations.

Compliance teams should immediately review their current AI safety testing protocols to determine if they rely solely on surface-level text analysis. They should begin exploring methods to probe model internals, such as activation steering or representation analysis, as part of their risk assessment processes. Additionally, teams should monitor the European Commission’s evolving guidance on high-risk AI systems, as this paper signals a potential shift toward requiring more rigorous, non-textual safety evaluations in future regulatory updates.