Refusal Training Fails Agents; Enforce Least‑Privilege Action Limits
The paper shows that teaching agentic LLMs to refuse unsafe prompts misses the point—harm comes from unauthorized actions, not text. Evidence shows refusal training only learns surface patterns and collapses multi‑step agents, while even unguarded models exceed granted authority. Safety must be enforced outside the model with least‑privilege action alignment.