Preventing Safety Drift in Large Language Models via Coupled Weight and Activation Constraints
For LLM practitioners, CWAC provides a robust method to prevent safety drift during fine-tuning, outperforming existing defenses.
Safety alignment in LLMs degrades during fine-tuning. CWAC simultaneously constrains weights and activations to preserve safety, achieving the lowest harmful scores with minimal accuracy loss across four LLMs.
Safety alignment in Large Language Models (LLMs) remains highly fragile during fine-tuning, where even benign adaptation can degrade pre-trained refusal behaviors and enable harmful responses. Existing defenses typically constrain either weights or activations in isolation, without considering their coupled effects on safety. In this paper, we first theoretically demonstrate that constraining either weights or activations alone is insufficient for safety preservation. To robustly preserve safety alignment, we propose Coupled Weight and Activation Constraints (CWAC), a novel approach that simultaneously enforces a precomputed safety subspace on weight updates and applies targeted regularization to safety-critical features identified by sparse autoencoders. Extensive experiments across four widely used LLMs and diverse downstream tasks show that CWAC consistently achieves the lowest harmful scores with minimal impact on fine-tuning accuracy, substantially outperforming strong baselines even under high harmful data ratios.