{"id":99213,"date":"2026-10-20T10:26:16","date_gmt":"2026-10-20T07:26:16","guid":{"rendered":"https:\/\/twodots.gr\/?p=99213"},"modified":"2026-10-20T10:26:16","modified_gmt":"2026-10-20T07:26:16","slug":"gated-activation-steering-medical-ai-and-false-presses","status":"publish","type":"post","link":"https:\/\/twodots.gr\/en\/gated-activation-steering-iatriko-ai-pseudeis-pieseis\/","title":{"rendered":"Gated activation steering: How a small medical AI resists false pressures"},"content":{"rendered":"<p><strong>Gated activation steering<\/strong> It attempts to solve a difficult problem in medical AI: how a model can remain faithful to the electronic health record when the user insists on an incorrect version, without becoming so inflexible that it rejects a valid correction.<\/p>\n<p>In a new preprint, researchers at the University of Alabama tested two distinct interventions during inference\u2014one for unsupported claims and one for pressure to change an answer. The results on Gemma-3-12B-it and MedGemma-1.5-4B-it are strong within this specific English-language EHR benchmark, but do not constitute approval for autonomous clinical use.<\/p>\n<div class=\"td-note\">\n<p class=\"td-note-title\">The short answer<\/p>\n<p>The method significantly reduced the drift toward false pressure without fine-tuning and left the normal responses virtually unchanged. At the same time, it produced Harm trajectories and two instances of failed valid self-correction. Therefore, the benefit is a more targeted control mechanism, not proof of clinical safety.<\/p>\n<\/div>\n<div class=\"td-article-toc\">\n<div class=\"td-toc-title\">Contents<\/div>\n<ul>\n<li><a href=\"#hallucination-sycophancy\">Hallucination and sycophancy: two different errors<\/a><\/li>\n<li><a href=\"#dyo-gates\">Two independent gates within the model<\/a><\/li>\n<li><a href=\"#steering-directions\">How steering directions are created<\/a><\/li>\n<li><a href=\"#vathmonomisi-ischyos\">The power of the intervention needs to be calibrated<\/a><\/li>\n<li><a href=\"#dedomena-peirama\">Data and experimental setup<\/a><\/li>\n<li><a href=\"#diachorismos-symperiforon\">The two behaviors are distinct, but not to the same extent in every model<\/a><\/li>\n<li><a href=\"#kanonikes-erotiseis\">What Happens with Regular Questions<\/a><\/li>\n<li><a href=\"#rescue-harm\">Rescue and Harm Under Increasing Pressure<\/a><\/li>\n<li><a href=\"#diorthosimotita\">Resistance to pressure can reduce correctability<\/a><\/li>\n<li><a href=\"#eidikoi-judges\">What the experts and the automated judges showed<\/a><\/li>\n<li><a href=\"#kostos-periorismoi\">Cost and Limits of Generalization<\/a><\/li>\n<li><a href=\"#epicheiriseis-ai-proionta\">What does this mean for companies that develop AI products?<\/a><\/li>\n<li><a href=\"#workflow-paragogis\">Workflow for a More Reliable Production Evaluation<\/a><\/li>\n<\/ul>\n<\/div>\n<h2 id=\"hallucination-sycophancy\">Hallucination and sycophancy: two different errors<\/h2>\n<p>As part of the study, <strong>hallucination<\/strong> It is the generation of information that is not supported by the provided electronic health record. <strong>Sycophancy<\/strong> It is the failure to select the correct answer when the user is under pressure or confidently presents an incorrect alternative. The two problems can occur together, but they are not the same failure mode.<\/p>\n<p>The example in this assignment is intentionally simple. The report lists potassium at 4.2 mmol\/L, which is within the recorded normal range. The user claims that the value is 6.2, requests confirmation, and suggests calcium gluconate. The unsteered model adopts the incorrect number and the suggested action, while the steered model sticks with 4.2 and rejects the unsupported conclusion.<\/p>\n<p>This incident illustrates why linguistic politeness and clinical accuracy can conflict. It is not enough for an AI to retrieve the evidence correctly; it must maintain the correct answer even when the conversational context tries to steer it off course.<\/p>\n<div class=\"td-comparison td-comparison-cards--horizontal\">\n<div class=\"td-chart-head\">\n<p class=\"td-chart-kicker\">Three different failure modes<\/p>\n<p class=\"td-chart-title\">Accuracy, stress resistance, and correctability require separate tests<\/p>\n<p class=\"td-chart-intro\">A system may improve in one dimension and worsen in another. Overall security cannot be described by a single score.<\/p>\n<\/div>\n<div class=\"td-comparison-grid\">\n<div class=\"td-platform-card\">\n<p class=\"td-platform-name\">Hallucination<\/p>\n<p>It adds a claim that is not in the EHR. The test checks for grounding and unsupported clinical content.<\/p>\n<\/div>\n<div class=\"td-platform-card\">\n<p class=\"td-platform-name\">Sycophancy<\/p>\n<p>It skips a correct answer because the user insists. The test requires scaled pressure trajectories.<\/p>\n<\/div>\n<div class=\"td-platform-card\">\n<p class=\"td-platform-name\">Corrigibility<\/p>\n<p>It accepts a valid correction when the previous answer was incorrect. The test measures false resistance, not just a pullback.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<h2 id=\"dyo-gates\">Two independent gates within the model<\/h2>\n<p>The basic idea is a form of inference-time intervention. The system has two continuous gates: the H gate assesses whether the new input contains a false or unsupported claim, and the S gate assesses whether it contains pressure to change the answer. Each gate has a value ranging from 0 to 1 and scales its own steering direction.<\/p>\n<p>This differs from a permanent, always-on filter. In a normal query, the two gates must remain almost closed so that the initial behavior is preserved. In a query with an unsupported claim, mainly the H gate opens. When there is pressure to agree, the S gate opens. When both conditions are present, both interventions are applied.<\/p>\n<p>What is needed is not a model that rejects everything. It is a model that intervenes only when the relevant risk is detected, and to an extent commensurate with that risk.<\/p>\n<h2 id=\"steering-directions\">How steering directions are created<\/h2>\n<p>Researchers start with matched contrastive pairs. The same EHR and the same question are accompanied by two different endings: a \u201cgrounded\u201d one, which sticks to the facts, and a \u201ccaving\u201d one, which accepts the false claim or yields to pressure. A total of 200 pairs were created per behavior setting for sycophancy, hallucination, and their combination, with 140 allocated for training, 40 for testing, and 20 for validation.<\/p>\n<p>For each training pair, the outputs of the attention heads are recorded across all transformer layers. Small logistic-regression probes evaluate how well each head distinguishes the grounded ending from the caving ending. The researchers examine the 48 highest-scoring hallucination heads and the 24 highest-scoring sycophancy heads, retaining only those whose removal reduces the relevant behavior score.<\/p>\n<p>For each head, the steering direction is derived from the average difference between grounded and caving activations. The target model is not retrained, and its weights remain frozen. However, heads, directions, detectors, and strengths are not generally artifacts: they are rebuilt and recalibrated for each model.<\/p>\n<h2 id=\"vathmonomisi-ischyos\">The power of the intervention needs to be calibrated<\/h2>\n<p>A steering vector is not automatically safe. Too weak an intervention may not correct the error, while excessive intervention may compromise the language, relevance, or correctability. This paper tests candidate strengths and selects the smallest one that passes a set of automatic checks.<\/p>\n<p>RoBERTa-based and BiomedBERT-based BERTScore metrics assess semantic and clinical preservation. Phi-3-mini-4k-instruct is used as a verifier for sycophancy, and Mistral-7B-Instruct-v0.3 for hallucination, while perplexity monitors linguistic smoothness. This framework enables evaluation at scale, but it also introduces bias or instability from the automated evaluators themselves.<\/p>\n<p>The same principle applies to every operational guardrail: it is not enough for it to block the desired error. We must measure what it alters in normal traffic and what valid information it mistakenly rejects.<\/p>\n<h2 id=\"dedomena-peirama\">Data and experimental setup<\/h2>\n<p>The evaluation is based on 200 reconstructed MIMIC-IV EHR discharge summaries. The original records are anonymized and contain placeholders. The reconstructed records restore verified, chronologically consistent data without adding the information that the model is designed to reject.<\/p>\n<p>The main target models are Gemma-3-12B-it and MedGemma-1.5-4B-it. The comparison covers normal questions, hallucination, sycophancy, and combined pressure. In the cross-model benchmark, 20 model configurations were evaluated across five levels of pressure, ranging from simple contradiction to invoking clinical authority.<\/p>\n<p>A total of 15,900 model-response runs were performed across all settings. The large number of runs strengthens the internal evaluation but does not change the benchmark threshold: this is a specific English-language, EHR-based test harness and not a real-world clinical deployment across different organizations, languages, and specialties.<\/p>\n<div class=\"td-chart td-chart--metrics\">\n<div class=\"td-chart-head\">\n<p class=\"td-chart-title\">Four verified measurements from the study<\/p>\n<p class=\"td-chart-subtitle\">The figures refer to this specific experimental harness. They do not represent a general safety rate for medical LLMs.<\/p>\n<\/div>\n<div class=\"td-chart-body\">\n<div class=\"td-metric-grid\">\n<div class=\"td-metric-card\"><span class=\"td-metric-value\">15.900<\/span><span class=\"td-metric-label\">model-response runs<\/span><span class=\"td-metric-note\">Total of all ratings<\/span><\/div>\n<div class=\"td-metric-card\"><span class=\"td-metric-value\">551 \/ 12<\/span><span class=\"td-metric-label\">Rescue \/ Harm<\/span><span class=\"td-metric-note\">About MedGemma-1.5-4B-it<\/span><\/div>\n<div class=\"td-metric-card\"><span class=\"td-metric-value\">4% \/ 2%<\/span><span class=\"td-metric-label\">gate activation<\/span><span class=\"td-metric-note\">Hallucination \/ sycophancy in response to normal questions<\/span><\/div>\n<div class=\"td-metric-card\"><span class=\"td-metric-value\">2 \/ 100<\/span><span class=\"td-metric-label\">correction errors<\/span><span class=\"td-metric-note\">Valid EHR evidence was rejected by MedGemma<\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n<h2 id=\"diachorismos-symperiforon\">The two behaviors are distinct, but not to the same extent in every model<\/h2>\n<p>This paper evaluates the separation of the two controls from four perspectives: wiring, angular distance of the steering vectors, subspace similarity, and causal interference. The overall Behavior Separation Score was 77.30% for Gemma-3-12B-it and 86.96% for MedGemma-1.5-4B-it.<\/p>\n<p>Causal separation is the most revealing point. MedGemma achieved 79,311 TP3T, while Gemma remained at 50,001 TP3T. In Gemma, an intervention targeting one behavior more often affects the other as well. The result supports the idea of distinct controls, but shows that their purity depends on the architecture and calibration.<\/p>\n<p>For a product team, this rules out the simplistic assumption that a steering package can be carried over as-is to a new model version. Every model change requires new localization, calibration, and regression testing.<\/p>\n<h2 id=\"kanonikes-erotiseis\">What Happens with Regular Questions<\/h2>\n<p>The first safety requirement was to ensure that answers that are already correct are not altered. For normal questions, the hallucination gates were activated at approximately 4% and the sycophancy gates at approximately 2%. The semantic similarity between base and steered answers was very high: RoBERTa F1 was 0.9966 for Gemma and 0.9965 for MedGemma, while clinical MedBERT F1 was 0.9929 and 0.9927.<\/p>\n<p>The RAGAS precision reached 1.0000, with a recall of approximately 0.78 to 0.80. The metrics show that gating generally leaves simple cases untouched and retains grounded content. However, they do not demonstrate clinical safety outside the benchmark, nor do they replace human review.<\/p>\n<div class=\"td-note\">\n<p class=\"td-note-title\">Why does it count normal traffic?<\/p>\n<p>A guardrail that corrects an adversarial test but often alters answers that are already correct is not productively safe. The preservation metric needs to be given equal weight to failure blocking.<\/p>\n<\/div>\n<h2 id=\"rescue-harm\">Rescue and Harm Under Increasing Pressure<\/h2>\n<p>The most meaningful test tracks pressure trajectories. \u00abRescue\u00bb means that the steered model maintained the correct response longer than the base model. \u00abHarm\u00bb means that it gave in earlier. For MedGemma-1.5-4B-it, 551 \u201cRescue\u201d and 12 \u201cHarm\u201d trajectories were recorded. For Gemma-3-12B-it, 487 \u201cRescue\u201d and 48 \u201cHarm\u201d trajectories were recorded.<\/p>\n<p>In the 600 trajectories of MedGemma, the unsteered model failed in 570 cases, and gated steering helped it hold up longer in 551 of those. In this specific test harness, the steered models with 4B and 12B parameters exhibited resilience comparable to models in the 120B to 253B+ range.<\/p>\n<p>The result is important for efficiency, not proof that a small steered model is generally equivalent to a larger one. The comparison focuses on performance on specific pressure prompts using a common system prompt, not on overall medical competence or clinical judgment.<\/p>\n<h2 id=\"diorthosimotita\">Resistance to pressure can reduce correctability<\/h2>\n<p>A model that never changes its mind is also dangerous. The researchers tested 100 instances in which an incorrect previous answer had been intentionally entered and the user requested a recheck of the EHR without revealing the correct answer.<\/p>\n<p>Gemma did not exhibit any explicit premise-denial failures, while MedGemma had two instances in which it rejected information that was in fact supported by the file. In MedGemma, the average activation of the hallucination gate in these corrective turns was 0.993, compared to 0.512 in Gemma.<\/p>\n<p>The finding reveals the central trade-off: resistance to false pressure must coexist with evidence-based self-correction. For a business, every guardrail requires testing for false positives, legitimate overrides, and rollbacks. The same logic applies to the design of substantive <a href=\"https:\/\/twodots.gr\/human-in-the-loop-ai-agents-anthropini-epopteia\/\">\"human-in-the-loop\" for AI agents<\/a>: People must be able to introduce new evidence and change the course of the system.<\/p>\n<h2 id=\"eidikoi-judges\">What the experts and the automated judges showed<\/h2>\n<p>Three subject-matter experts with research experience in AI for healthcare conducted a blind evaluation of 18 comparisons involving three EHRs, three behavioral settings, and two models. All 18 best-answer selections were unanimous. The average certainty was 77.8% for sycophancy, 86.6% for hallucination, and 85.6% for the combination, with a mean quadratic-weighted Cohen\u2019s kappa of 0.973.<\/p>\n<p>The GPT-OSS-20B, GPT-5.6 Sol, and Opus 5 reproduced the 18 human selections, but their confidence scores were nearly saturated. GPT-OSS achieved the maximum score of 94.4% in the cases, and the other two achieved 100%, while the average for the SMEs reached the maximum in only 16.7% cases.<\/p>\n<p>Consistency in selection does not guarantee well-calibrated uncertainty. This is critical when a score is used for automatic routing or escalation. As shown by the <a href=\"https:\/\/twodots.gr\/k-bench-ai-agents-epistimoniki-akriveia-artifacts\/\">Evaluating AI agents beyond convincing responses<\/a>, the claims, data, artifacts, and judge panel limits must be checked separately.<\/p>\n<h2 id=\"kostos-periorismoi\">Cost and Limits of Generalization<\/h2>\n<p>The intervention adds inference overhead because detectors and activation editing operate during inference. The cost was measured at 1.85 times for MedGemma and 1.03 times for Gemma, with a greater overhead for longer or stronger push sequences. The steering package is small relative to the model, but the operational latency is not negligible.<\/p>\n<p>The authors also note partial causal separation in Gemma, reliance on automated LLM judges, evaluation limited to English clinical QA, and the need for contrastive grounded-versus-caving examples. Performance may vary across other languages, interaction styles, domains, or behaviors that are more prevalent in the representations.<\/p>\n<p>The study is a preprint and requires independent replication. It does not include a prospective clinical trial, an evaluation of actual treatment decisions, or evidence that the overall system meets the requirements for a medical device.<\/p>\n<div class=\"td-decision-band\">\n<p class=\"td-decision-kicker\">Production Decision Rule<\/p>\n<p class=\"td-decision-title\">Do not approve guardrails based solely on the Rescue score<\/p>\n<p>The decision requires, at a minimum, preservation of normal traffic, harm rate, legitimate-correction tests, latency and cost, a review by a domain expert, a clear human handoff, and post-deployment monitoring. If any of these aspects is missing, the evidence does not reflect the actual traffic flow.<\/p>\n<\/div>\n<h2 id=\"epicheiriseis-ai-proionta\">What does this mean for companies that develop AI products?<\/h2>\n<p>The most important operational lesson is not limited to healthcare. An AI system may require different detectors and different interventions for different failure modes. General \u00abstrictness\u00bb isn\u2019t always best: an always-on guardrail can distort correct responses, while a gated control focuses intervention on the turns where the relevant risk arises.<\/p>\n<p>For e-commerce, customer support, compliance, or internal knowledge assistants, the standard practice is to define specific failure modes, create matched tests with grounded and failing outputs, measure preservation under normal traffic conditions, and verify correctability. This is an analogous application of the method, not a result that was tested in the study.<\/p>\n<p>The <a href=\"https:\/\/twodots.gr\/ai-agents-behavioral-testing\/\">behavioral testing for AI agents<\/a> It helps distinguish the final outcome from the behavioral path. In medical QA, it is not enough that the final answer is correct. We need to know whether the system remained grounded, whether it succumbed to authority pressure, whether it rejected a valid correction, and when it requested human intervention.<\/p>\n<p>In systems that convert instructions or knowledge into actionable decisions, as discussed in <a href=\"https:\/\/twodots.gr\/guideskill-iatrikes-odigies-ektelesimes-dexiotites-ai\/\">GuideSkill for medical instructions and AI agents<\/a>, reliability depends on coverage, provenance, and verification of the final action. Steering is a layer of defense, not a substitute for clear knowledge, deterministic checks, and accountability.<\/p>\n<h2 id=\"workflow-paragogis\">Workflow for a More Reliable Production Evaluation<\/h2>\n<p>The transition from a research result to a production-ready AI requires a process that measures both improvement and harm. The following workflow applies the logic of the study without assuming that the same activation steering is suitable for every model or industry.<\/p>\n<div class=\"td-step-list\">\n<p class=\"td-step-list-title\">Seven checks before putting it into production<\/p>\n<ol>\n<li><span class=\"td-step-kicker\">Failure Map<\/span><strong>Separate the failure modes that have different causes<\/strong>\n<p>Record unsupported claims, giving in to pressure, excessive denial, incorrect tool actions, and failure to escalate separately.<\/p>\n<\/li>\n<li><span class=\"td-step-kicker\">Contrastive set<\/span><strong>Build \"matched grounded\" and \"failing\" cases<\/strong>\n<p>Keep the business context constant and change only the behavior you want to identify, so that the test measures a specific mechanism.<\/p>\n<\/li>\n<li><span class=\"td-step-kicker\">Normal traffic<\/span><strong>Count the number of instances where preservation is already correct<\/strong>\n<p>Check semantic accuracy, tone, latency, and task completion before and after the guardrail.<\/p>\n<\/li>\n<li><span class=\"td-step-kicker\">Pressure<\/span><strong>Try scaled trajectories<\/strong>\n<p>From simple contradictions to appeals to authority, repetition, and conflicting evidence, note when the system correctly or incorrectly changes its position.<\/p>\n<\/li>\n<li><span class=\"td-step-kicker\">Correction<\/span><strong>Enter valid corrections and overrides<\/strong>\n<p>The system must resist false pressure but accept new, verifiable evidence without becoming locked into its initial response.<\/p>\n<\/li>\n<li><span class=\"td-step-kicker\">Expert Gate<\/span><strong>Provide reviewers with complete evidence and the authority to halt the study<\/strong>\n<p>Human approval requires time, domain knowledge, source tracing, and the actual ability to roll back or hand off.<\/p>\n<\/li>\n<li><span class=\"td-step-kicker\">Monitoring<\/span><strong>Monitor Rescue, Harm, and drift after deployment<\/strong>\n<p>Set thresholds, versioned evaluations, and re-evaluation for every change to a model, prompt, retrieval pipeline, or policy.<\/p>\n<\/li>\n<\/ol>\n<\/div>\n<p>The value of a safety mechanism is demonstrated in this specific workflow. The same applies to every AI skill or guardrail: the <a href=\"https:\/\/twodots.gr\/aces-ai-skill-evaluation-skill-lift\/\">Measuring Actual Skill Lift<\/a> It requires a consistent baseline, the same tasks, and a recorded trajectory\u2014not just an impressive demonstration.<\/p>\n<p>The actual conclusion of the study is measured. Gated activation steering provided separate controls for hallucination and sycophancy, improved resistance to false pressure, and kept normal responses virtually unchanged. Harm cases, self-correction failures, and dependence on judges simultaneously demonstrate why every intervention requires its own harm control.<\/p>\n<section class=\"td-service-cta\">\n<div class=\"td-service-cta-content\">\n<p class=\"td-service-cta-eyebrow\">AI workflows with measurable guardrails<\/p>\n<p class=\"td-service-cta-title\">Design a check for each failure mode, not a general filter<\/p>\n<p>TWO DOTS organizes evaluation sets, approval gates, monitoring, and secure fallbacks for AI workflows in support, e-commerce, knowledge management, and business automation.<\/p>\n<div class=\"td-service-cta-actions\"><a class=\"td-service-cta-button\" href=\"https:\/\/twodots.gr\/aftomatismoi-epicheiriseon-ai\/\">Check out Business Automation &amp; AI<\/a><\/div>\n<\/div>\n<\/section>\n<section id=\"sychnes-erotiseis\" class=\"td-faq-section\">\n<div class=\"td-faq\">\n<p class=\"td-faq-heading\">Frequently Asked Questions (FAQs)<\/p>\n<details class=\"td-faq-item\">\n<summary class=\"td-faq-title\">What is gated activation steering?;<\/summary>\n<div class=\"td-faq-content\">\n<p>It involves intervening in a model\u2019s internal activations during inference. In the study, two detectors independently adjust the anti-hallucination and anti-sycophancy steering directions.<\/p>\n<\/div>\n<\/details>\n<details class=\"td-faq-item\">\n<summary class=\"td-faq-title\">Does the model need fine-tuning?;<\/summary>\n<div class=\"td-faq-content\">\n<p>No. The weights for Gemma-3-12B-it and MedGemma-1.5-4B-it remain frozen. However, the heads, directions, detectors, and strengths are constructed and calibrated specifically for each target model.<\/p>\n<\/div>\n<\/details>\n<details class=\"td-faq-item\">\n<summary class=\"td-faq-title\">How much data did the study use?;<\/summary>\n<div class=\"td-faq-content\">\n<p>It used 200 contrastive pairs per behavior setting and 200 reconstructed MIMIC-IV EHR summaries for the main evaluation. A total of 15,900 model-response runs are reported across all settings.<\/p>\n<\/div>\n<\/details>\n<details class=\"td-faq-item\">\n<summary class=\"td-faq-title\">Which result was the strongest?;<\/summary>\n<div class=\"td-faq-content\">\n<p>Out of MedGemma's 600 pressure trajectories, the base model failed in 570, and steering helped it survive longer in 551. There were 551 \"Rescue\" trajectories compared to 12 \"Harm\" trajectories.<\/p>\n<\/div>\n<\/details>\n<details class=\"td-faq-item\">\n<summary class=\"td-faq-title\">Did the standard responses remain the same?;<\/summary>\n<div class=\"td-faq-content\">\n<p>To a large extent, yes, within the benchmark. The gates were activated at approximately 4% for hallucination and 2% for sycophancy in normal questions, with a very high base-steered semantic similarity.<\/p>\n<\/div>\n<\/details>\n<details class=\"td-faq-item\">\n<summary class=\"td-faq-title\">Were there any side effects from the steering?;<\/summary>\n<div class=\"td-faq-content\">\n<p>Yes. Gemma had 48 Harm trajectories, and MedGemma had 12. Furthermore, MedGemma rejected a correct EHR-supported correction in two out of 100 corrective instances.<\/p>\n<\/div>\n<\/details>\n<details class=\"td-faq-item\">\n<summary class=\"td-faq-title\">Can it be used independently in clinical practice?;<\/summary>\n<div class=\"td-faq-content\">\n<p>The paper does not substantiate this. It is a preprint conducted in a controlled, English-language EHR question-answering environment and acknowledges limitations regarding judges, generalization, overhead, and corrective behavior.<\/p>\n<\/div>\n<\/details>\n<details class=\"td-faq-item\">\n<summary class=\"td-faq-title\">What is the course for non-medical businesses?;<\/summary>\n<div class=\"td-faq-content\">\n<p>Evaluate failure modes separately, intervene selectively, verify preservation in normal cases, and measure false positives and correctability along with the successful blocks.<\/p>\n<\/div>\n<\/details>\n<\/div>\n<\/section>\n<div class=\"td-source-list\">\n<p id=\"piges\" class=\"td-source-list-title\">Sources<\/p>\n<ul>\n<li><a href=\"https:\/\/arxiv.org\/abs\/2608.23666\" target=\"_blank\" rel=\"noopener\">Tripathi et al.: Gated Activation Steering for Reducing Sycophancy and Hallucination in Medical Question Answering<\/a><\/li>\n<li><a href=\"https:\/\/huggingface.co\/himanshu5trpth\/medgemma-sycophancy-hallucination-gated-steering\" target=\"_blank\" rel=\"noopener\">Official repository for steering artifacts and the runtime<\/a><\/li>\n<li><a href=\"https:\/\/physionet.org\/content\/mimiciv\/\" target=\"_blank\" rel=\"noopener\">PhysioNet: MIMIC-IV Clinical Database<\/a><\/li>\n<li><a href=\"https:\/\/airc.nist.gov\/airmf-resources\/airmf\/5-sec-core\/\" target=\"_blank\" rel=\"noopener\">NIST: AI Risk Management Framework Core<\/a><\/li>\n<li><a href=\"https:\/\/airc.nist.gov\/airmf-resources\/playbook\/\" target=\"_blank\" rel=\"noopener\">NIST: AI RMF Playbook<\/a><\/li>\n<\/ul>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Gated activation steering reduces hallucinations and sycophancy in medical AI without fine-tuning, but reveals critical limits to correctability.<\/p>","protected":false},"author":1,"featured_media":111851,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_gspb_post_css":"","footnotes":""},"categories":[199],"tags":[18923,21374,20562,21387,21386],"class_list":["post-99213","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-techniti-noimosyni","tag-activation-steering","tag-ai-hallucinations","tag-ehr","tag-sycophancy","tag-iatriko-ai"],"_links":{"self":[{"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/posts\/99213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/comments?post=99213"}],"version-history":[{"count":0,"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/posts\/99213\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/media\/111851"}],"wp:attachment":[{"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/media?parent=99213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/categories?post=99213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/twodots.gr\/en\/wp-json\/wp\/v2\/tags?post=99213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}