Refusal in LLMs is mediated by a single direction

The Classifier-Free Guidance (CFG) feature in llama.cpp likely acts as a built-in way to do something like using the "reverse-prompt" / "cfg-negative-prompt" flags in "main".