arXiv:2608.08485cs.AIcs.CL2026-08

用几何推理守护大模型安全,不微调、无成本、跨语言可用。

HoloAegis: Frozen Representation, Topological Inference: Minimally Parametric Safety Manifolds for Zero-Shot LLM Guardrails

  • 基于冻结语义表示的拓扑推理,仅靠锚点与温度参数决策。
  • 8个基准测试全超顶尖,最高AUC达1.0000,响应快于1毫秒。
  • 适合追求零样本、低延迟、跨语言安全防护的开发者使用。

当前大模型安全防护面临根本矛盾:微调会扭曲预训练表征,生成式评判则带来高昂推理开销。我们提出新范式:能否仅通过冻结语义表示的纯几何推理实现安全?为此构建了HoloAegis——一种极简参数的拓扑推理框架,将表征与推理解耦。仅需固定锚点数K与温度tau,无需梯度训练。文本经未微调编码器映射至单位球面后,所有决策均为几何操作。我们将安全评估形式化为预计算系统拓扑锚点库上的吉布斯-玻尔兹曼自由能计算,并引入双时间尺度指数移动平均检测多轮对话中的语义漂移。关键理论洞察为拓扑边界稳定性猜想:稀疏锚点中心在对抗高频词汇扰动方面显著优于全向量空间方法。在8个基准上验证,取得最优性能(AuthenHallu AUC 1.0000,HarmBench 0.9802),延迟低于1毫秒,无需冷启动数据,支持跨语言迁移(中文CHIFRAUD AUC 0.9758)。

原文摘要 · Abstract (English)

Current LLM safety guardrails face a fundamental tension: fine-tuning distorts pre-trained representations while generative judges incur prohibitive inference costs. We challenge the prevailing paradigm by asking: can safety be achieved through pure geometric reasoning over frozen semantic representations? We present HoloAegis, a minimally parametric topological inference framework that decouples representation from reasoning. We term our approach minimally parametric because the only free parameters are the anchor count K and the temperature tau, both fixed after construction and requiring no gradient-based training. An un-fine-tuned encoder maps text to a unit sphere, after which all decisions are purely geometric. We formalize safety evaluation as a Gibbs-Boltzmann Free Energy computation over a pre-computed System Topology Anchor Bank, and we introduce Dual Time-Scale Exponential Moving Averages to detect progressive multi-turn semantic drift. Our key theoretical insight is a Topological Boundary Stability Conjecture: we provide theoretical motivation and strong empirical evidence that sparse anchor centroids stabilize the decision boundary against high-frequency lexical perturbations far better than full vector space methods. Evaluated across 8 benchmarks, HoloAegis achieves state-of-the-art accuracy (1.0000 AUC on AuthenHallu, 0.9802 on HarmBench) with sub-millisecond latency, zero cold-start data, and cross-lingual transfer (0.9758 AUC on Chinese CHIFRAUD).

大模型安全拓扑推理零样本防护几何方法

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。