2026
A2D: Any-Order, Any-Step Safety Alignment for Diffusion Language Models
ICLR 2026poster
Diffusion large language models (dLLMs) enable any-order generation, but this flexibility enlarges the attack surface: harmful spans may appear at arbitrary positions, and template-based prefilling attacks such as DIJA bypass response-level refusals. We introduce A2D (Any-Order, Any-Step Defense), a…