Detoxifying Large Language Models via Autoregressive Reward Guided Representation Editing

Dacheng Tao (Nanyang Technological University) · Siyuan Liang (National University of Singapore) · Aishan Liu (Beihang University) · Xianglong Liu (Beihang University, Tsinghua University) · Yisong Xiao (Beijing University of Aeronautics and Astronautics) · Zonghao Ying (Beijing University of Aeronautics and Astronautics)
autoregressive reward modeldense training signalsdetoxification strategiesdirectional steeringdynamic interventionsfine-grained transition trajectoriesgradient-based refinementsinference efficiencyinterpolationlatent representation spacenon-toxic semantic directionssparse toxicity annotationstest-time detoxificationtoxicity transitionstransition space

Large Language Models (LLMs) have demonstrated impressive performance across various tasks, yet they remain vulnerable to generating toxic content, necessitating detoxification strategies to ensure safe and responsible deployment. Test-time detoxification methods, which typically introduce static or dynamic interventions into LLM representations, offer a promising solution due to their flexibility and minimal invasiveness. However, current approaches often suffer from imprecise interventions, primarily due to their insufficient exploration of the transition space between toxic and non-toxic outputs. To address this challenge, we propose \textsc{A}utoregressive \textsc{R}eward \textsc{G}uided \textsc{R}epresentation \textsc{E}diting (ARGRE), a novel test-time detoxification framework that explicitly models toxicity transitions within the latent representation space, enabling stable and precise reward-guided editing. ARGRE identifies non-toxic semantic directions and interpolates between toxic and non-toxic representations to reveal fine-grained transition trajectories. These trajectories transform sparse toxicity annotations into dense training signals, enabling the construction of an autoregressive reward model that delivers stable and precise editing guidance. At inference, the reward model guides an adaptive two-step editing process to obtain detoxified representations: it first performs directional steering based on expected reward gaps to shift representations toward non-toxic regions, followed by lightweight gradient-based refinements. Extensive experiments across 8 widely used LLMs show that ARGRE significantly outperforms leading baselines in effectiveness (-62.21\% toxicity) and efficiency (-47.58\% inference time), while preserving the core capabilities of the original model with minimal degradation. Our code is available at the \href{https://anonymous.4open.science/r/ARGRE-6291}{anonymous website}.