Imagine you're mixing paint. You want to know exactly what "blue" contributes to a six-color blend. The naive approach — comparing the blend to plain white — tells you the blend is colorful, but nothing specific about blue. The smarter move: mix the blend with and without blue, then subtract. The difference isolates blue's contribution. That's the core mechanism of VIAS, applied not to pigments but to the internal activation vectors of large language models trying to follow organisational values. The committed claim: contrastive activation steering vectors built by the standard method (compliant vs. non-compliant responses) collapse into a single "be good" direction — they can't distinguish honesty from fairness from transparency. VIAS fixes this by contrasting responses generated under a full-value prompt against responses generated under the same prompt minus one target value, producing vectors that actually separate in activation space. Combined with prompting, this yields full compliance rates of 69.6% (Qwen2.5-7B), 75.2% (Mistral-7B), and 72.6% (Phi-3.5-mini) across scenarios tagged with multiple values from a 21-value taxonomy. The baseline here is prompting alone — system prompts that list the relevant values. VIAS + prompting beats prompting-only across all three models, but the paper is honest about a critical limitation: steering alone (without prompting) doesn't deliver independent per-value control. The vectors reduce overlap and improve multi-value compliance, but they aren't toggle switches. You can't reliably turn "transparency" up while holding "fairness" steady. The paper frames this as a finding, not a failure, which is the right move — but it means the practical use case is "boost prompting" rather than "replace prompting with fine-grained activation control." Architecturally, this sits in the activation-steering family pioneered by representation engineering and contrast-consistent search. The method is inference-time, weight-frozen, and works by adding learned direction vectors to residual-stream activations at selected layers. The key structural choice is the contrastive pair construction: rather than compliant-vs-violating, it's all-values-vs-all-minus-one. This is a data-curation insight more than an algorithmic one — the steering machinery is standard; the novelty is in what you contrast. Integrity-wise, the evaluation uses PROTECT, a workplace compliance benchmark with a 21-value taxonomy where scenarios are tagged with relevant values. The grading is done by an LLM judge (GPT-4o), which introduces circularity: an LLM evaluates whether another LLM's steered outputs comply with values. The paper acknowledges this. Three models are tested, which is better than one, but all are 7B-class instruction-tuned models. No human evaluation is reported. The filtering criteria for valid contrastive pairs — target value must flip while others remain compliant — is sensible but introduces selection bias into which values get well-represented vectors. The milestone question is where this gets interesting. Full compliance at 69-75% across multi-value scenarios is a start, but the real unlock would be independent per-value controllability — being able to dial individual values up or down without cross-talk. The paper explicitly shows this doesn't work yet: steering vectors reduce overlap but don't achieve orthogonality. Getting from "reduced overlap" to "independent axes" is the gap. If someone demonstrates true per-value independent steering at, say, 90%+ compliance across 10+ simultaneous values, that changes the game for enterprise LLM governance. The obvious next experiment the authors didn't run: scaling to larger models. All three tested models are 7B-class. Activation steering's effectiveness can change dramatically with model scale — larger models have higher-dimensional residual streams, which could either help (more room for orthogonal value directions) or hurt (values might be encoded differently). My read: this is a compute-budget limitation. The PROTECT benchmark evaluation with GPT-4o judging is already expensive at 7B scale; running it across 70B models would multiply costs significantly. The second missing experiment is human evaluation of compliance judgments — the LLM-judge circularity is the weakest link in the validation chain.
