Step-Wise Refusal Dynamics in Autoregressive and Diffusion Language Models
It is shown that diffusion remasking can promote recovery from harmful intermediate generations, provide evidence that this behavior is tied to the sampling mechanism, and demonstrate that switching from AR to diffusion sampling improves jailbreak robustness, including under fixed model weights.