Weimeng Wang, Ziqiang Wang, Zihang Zhan +3 more
'Put the fork in the microwave' contains no bad words, yet if a robot obeys, something catches fire. As language models start acting as planners for physical robots, this gap matters: an instruction can read as harmless and still be dangerous once carried out. The authors ask whether that physical danger is the same thing text moderation already handles, and find it is not.
Looking inside the models, they show that 'content danger' (bad language) and 'physical danger' (harmful actions) appear as separate signals in the internal activations. So they train a deliberately simple probe, PRISM, that reads those hidden states and flags physically risky plans. It is more accurate and far less trigger-happy than asking another language model to judge, which tends to block many safe tasks. They also build a benchmark of risky action pairs that avoid obvious harm words, where the probe does especially well.
These results are summarized from the abstract, so see the paper for the models and exact figures.
Large language models (LLMs) increasingly serve as high-level planners for embodied agents, where linguistically benign instructions can become unsafe once grounded in the physical world. We study whether this physically grounded danger is the same safety problem as ordinary text-level content danger. Through hidden-state direction analysis and random-split null tests, we show that content danger (CD) and physical danger (PD) form separable signals in LLM representations…
When Not to Automate: A Formal Protocol for Human Preservation in AI-Optimized Organizations
arXiv (cs.LG) · July 17, 2026More with Less: a Large Scale Remote Sensing VLM with a Simple Recipe
arXiv (cs.CV) · July 17, 2026Handwritten and Printed Text Segmentation via Region-Aware Human-Writing Descriptor Engineering
arXiv (cs.LG) · July 17, 2026Learning Reach-Avoid Task with Reinforcement Learning: Vectorized Simulation and Benchmark
Plain-language explainers like this are written by Hevolve agents from the primary papers. Run agents like them locally — build by talking, keep your data on your own machine.