← back to paper
arxiv: 2605.12726 · 2 revisions
Before the Last Token: Diagnosing Final-Token Safety Probe Failures