LLMs Encode Harmfulness and Refusal Separately - Zhao, Jiachen; Huang, Jing; Wu, Zhengxuan; Bau, David; Shi, Weiyan (Advances in Neural Information Processing Systems, 2025)