Sparse Autoencoders Find Highly Interpretable Features in Language Models. - Robert Huben; Hoagy Cunningham; Logan Riggs Smith; Aidan Ewart; Lee Sharkey (ICLR, 2024)

Eight Methods to Evaluate Robust Unlearning in LLMs. - Aengus Lynch; Phillip Guo; Aidan Ewart; Stephen Casper; Dylan Hadfield-Menell (CoRR, 2024)

Targeted Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs. - Abhay Sheshadri; Aidan Ewart; Phillip Guo; Aengus Lynch; Cindy Wu; Vivek Hebbar; Henry Sleight; Asa Cooper Stickland; Ethan Perez; Dylan Hadfield-Menell; Stephen Casper (CoRR, 2024)

Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization. - Phillip Guo; Aaquib Syed; Abhay Sheshadri; Aidan Ewart; Gintare Karolina Dziugaite (CoRR, 2024)

Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities. - Zora Che; Stephen Casper; Robert Kirk; Anirudh Satheesh; Stewart Slocum; Lev E. McKinney; Rohit Gandikota; Aidan Ewart; Domenic Rosati; Zichu Wu; Zikui Cai; Bilal Chughtai; et al. (Trans. Mach. Learn. Res., 2025)

Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs. - Abhay Sheshadri; Aidan Ewart; Phillip Guo; Aengus Lynch; Cindy Wu; Vivek Hebbar; Henry Sleight; Asa Cooper Stickland; Ethan Perez; Dylan Hadfield-Menell; Stephen Casper (Trans. Mach. Learn. Res., 2025)