When Keywords Drop but Classifiers Hold: Soft Refusals under KV Cache Compression
Safety auditing under compression should rely on several judges matched to the serving context rather than on keyword rates alone, because the gap is not universal and weakens under short fillers and paired SnapKV, so safety auditing should rely on several judges matched to the serving context rather than on keyword ra...