Ai Security, Llm, Jailbreak, Adversarial Attack, Trustworthy Ai.
tokens. The authors decompose s into s_L​in and s_A​ut as follows Decomposing s into s_Lin (linear approximatable term) and s_Aut (auto regressive term) for v in output. Since s_A​ut can be evaluated exactly (using a forward pass), only a first-order approximation is applied to the s_L​in term.