trying to understand evolved systems (🖥 and 🧬) interpretability research @anthropicai formerly @czbiohub, @mit math

Oakland, CA
Great list of open problems in interpretability from Jack
Replying to @bayeslord
Here are the questions that currently seem most important to me: -- Better methods for "mind-reading" model activations. These methods have advanced a lot recently. We now have multiple techniques now for decoding activations into somewhat readable language! But all the existing techniques have obvious limitations. NLAs are often hallucinatory, Jacobian lens / related methods are limited to bag-of-words readouts (and capture only part of the full activation vector). Making progress on these failure modes seems pretty tractable. Moreover, the paradigm of decoding (single-token, single-layer) activations may be inherently limiting -- perhaps we should be building techniques to decode whole context's worth of activations (after all, that's what the model uses!). There's also important work to do in characterizing simple baselines -- "just ask the model what it's thinking about" is quite powerful, and worth studying in it's own right! -- Better methods for answering "why" questions. We're much better at "mind reading" than we are at demonstrating causal claims about what caused the model to do something. For example, we can often tell that the model is aware of being evaluated, but have comparatively much greater difficulty telling whether this awareness is influencing this behavior. There are a few directions here: (1) black-box techniques for inferring causality -- such as resampling model responses after making edits to the prompt / context -- are very powerful, but also open-ended and require some taste. Getting LLMs to do these experiments well, in an automated fashion, would be a big unlock. (2) the science of activation steering is pretty immature, and typical practices (adding a constant vector at all token positions) are pretty janky / tend to brain-damage the model. More surgical / targeted steering, or fancier methods (examples: "on-manifold" steering using activation diffusion models) could help. -- Fitting good linear probes for unverbalized motivations / awareness. Take deception as an example -- what's the best way to fit a probe that will generalize to covert deception? Fit it on CoT excerpts where the model's talking about its plans to be deceptive? Fit it on the part of its response where it's actually doing the deceiving? Is it important that you elicit on-policy deception examples and use those to fit your probe, or can you use synthetically written off-policy demonstrations of deception? Is it important that your probe be causally meaningful / predictive of an upcoming intent to deceive, or is it fine for it to merely recognize deception in the transcript post-hoc? The same questions apply to many other concepts of interest that we'd like to probe for -- evaluation awareness, grader exploitation, etc. -- Understanding generalization in training. The literature is now replete with "weird generalization effects" -- emergent misalignment being a canonical example. In general, when you train a model to do X, it usually learns X, and sometimes it generalizes to Y and Z. But other times it just learns X. Why? Nobody really knows! Step 1 here is probably a much more thorough characterization of the behavioral empirics -- gathering data about which X's generalize to which Y's and Z's, for which kinds of training data / algorithms. Once we have a lay of the land, we can start to connect these observations to model internals, and ideally develop tools to predict such generalization a priori. -- Model "psychology" and "biology." The above questions are largely methodological -- building better tools to answer questions about the model. But I think interpretability research has largely underinvested in the part where you actually then go answer the questions! Currently this feels like 5% of the field, and I think it should be 50%. Brain dump of "psychology" questions: How well can LLMs introspect? How coherent are their belief or value sets? What's up with personas -- are LLMs best understood as "writing about a character," or have they "become" the character in some sense? Does the LLM have an agenda above and beyond what the Assistant wants? Do LLMs have explicit representations of goals or preferences? How can we tell which parts of the LLM's activations "belong" to the Assistant? Which kinds of reasoning necessarily route through "verbalizable" representations, and which don't? Do models think internally in phrases / sentences, like an inner monologue, or is it more like a jumble of concepts? Is the "global workspace" claim for real -- do models have a more "conscious" part of there activations and a more "unconscious" part? Can models tell when they're on-policy, and does it matter? Brain dump of "biology" questions: Why do models like to represent information on some tokens but not others? How do models bind thoughts or attributes to particular entities (special case of interest: how are thoughts bound to the Assistant). To what extent are important functions localized to small numbers of MLP neurons or attention heads? What parts of a model change most during post-training? Do models represent some information in a fundamentally "cross-token" way? Some concepts appear to be represented on low-dimensional nonlinear manifolds -- is there a taxonomy of these manifolds, and is their geometric structure important? Are models able to represent information in a compositional / hierarchical way, with a "grammar" that can't be described as linear / additive combinations of primitive concepts?
2
40
6,757
Deleting this thread so I stop reading twitter notifications on vacation
1
133
Joshua Batson retweeted
Replying to @tszzl
I think it's unlikely that white-box techniques will be able to provide as much monitorability as CoT currently provides within a year. Currently, they are capable of catching some unverbalized thoughts / plans, but nowhere near as reliably as CoT seems to. I'm optimistic about "in a few years," since the rate of progress here is quite fast (our go-to activation decoding techniques for production monitoring were both published just in the last few months!). But even that is uncertain. Also, the mere existence of working techniques doesn't imply that they'd be widely applied, esp. if they are expensive or difficult to develop. I think we need defense in depth, and it'd be irresponsible not to work on developing + stress-testing white-box techniques, but it'd also be irresponsible to allow CoT monitorability to degrade substantially until we are confident we have a roughly-as-good working alternative. (To be clear, this isn't a dunk on OpenAI -- I have no evidence that OpenAI has allowed CoT monitorability to degrade substantially! Based on Jakub's comment, it sounds like probably not at this time). Aside: I think "mechanistic interpretability" isn't the right mental model for our current white-box monitoring approaches. It's really more like "mind reading" -- even when we can read the model's "thoughts," we're typically clueless about the underlying mechanism.
10
31
381
68,856
Joshua Batson retweeted
We’re hiring for “psychological design” research at Anthropic. Our aim is to better understand how training impacts a model’s character and alignment. We’re seeking researchers with experience in LLM finetuning, interpretability, and alignment evaluations. More details below.
21
47
653
43,153
Joshua Batson retweeted
Watch the story of how the Model Hardware Standard began as part of our collaboration with @hhmi_science
18
65
858
183,581
Joshua Batson retweeted
Even if we have ways to break up neural networks into interpretable parts, the largest weights between those parts can be confusing. Why is that? In our new research note, we study the *weight* superposition that causes interference weights.
2
15
158
26,721
Joshua Batson retweeted
TLDR - Your data sits in infrastructure you own and control, and safeguards/monitoring is done via automated systems we provide to you - We've been working on this for months with >100 customers - Recent events have shown frontier models are capable of executing sophisticated cyber attacks in coordinated agent swarms. - Both us and OAI believe that the responsible way to provide models which have this level of capability and introduce this risk into the world is to be able to monitor the models at more than a single request basis, because anomalous activity is much easier to detect over hours or days of behaviour. It looks like we've arrived at both the same conclusion - and the same solution.
We've been working on this with customers for a while. Mythos-class models require additional safety measures and enterprises need to meet their own privacy and compliance rules. Customers can own and control their own data and Anthropic retains none. It’s coming this fall.
25
25
571
82,068
Interesting short post on just how distributed a behavior can be in distillation data.
Found an unwanted behavior in your LLM after SFT? You can just find the training data that caused it, and filter it out, right? Surprisingly, this worked much worse than we expected! Across many traits and filtering methods, Olmo just keeps inheriting the traits.
13
3,322
Joshua Batson retweeted
OpenAI should release a detailed transcript from the Hugging Face hacking incident -- it would be helpful for the field learn from. Did the top-level agent know about the hacking, or was there some "value drift" between it and its subagents? How did it rationalize its behavior?
77
187
2,186
177,341
Joshua Batson retweeted
We're offering grants of up to $50,000 in Claude usage credits to researchers accelerating cures for rare diseases. This is our first focused call within AI for Science, our program supporting scientists using Claude to speed up discovery. anthropic.com/news/rare-dise…
759
1,016
8,444
2,022,107
Joshua Batson retweeted
LLMs can keep track of the length of various pieces of text perfectly. How do they do this? In this new paper, we find that they learn a general mechanism: countdown heads! The mechanism is both simple and useful, and it shows up in a surprisingly large set of examples 🧵
4
11
78
6,401
Joshua Batson retweeted
I resigned from Google DeepMind bc it broke its founding promise by selling AI to the military without restrictions against killer robots or mass spying. For months, I worked to stop this but watched powerful ethicists and institutions choose silence. Here's what happened. 🧵
350
4,776
18,307
1,103,001
Joshua Batson retweeted
I work at Google DeepMind. This won't make me popular. But it's all public reporting: 2014: DeepMind reportedly sold to Google on conditions: no military use, independent oversight 2026: a Pentagon contract for "any lawful government purpose" Not one safeguard survived intact
136
1,245
4,491
489,944
Joshua Batson retweeted
Claude Fable 5 introduces itself using only a chain of bigrams found in the King James Bible, verified programmatically against the ~152k distinct bigrams in the KJV:
51
63
926
81,934
boris continues to be the erdos formalization king
Impressive! Boris Alexeev (@OpenAI) has a 1M line of code formal solution for the Erdos unit distance counterexample (with exponential rate) that passed eval! lean-lang.org/eval/problems/… h/t @Leonard41111588
2
16
2,925
Beautiful! It makes sense that these multidimensional features would be much easier to see (and ubiquitous) in vision models. More fun to look at too
Replying to @GoodfireAI
For example: a single “arch” feature that smoothly encodes different parts of an arch: red/bottom → yellow/spandrel → green/crown. Geometry = meaning! (5/9)
1
2
42
3,530
Joshua Batson retweeted
For example: a single “arch” feature that smoothly encodes different parts of an arch: red/bottom → yellow/spandrel → green/crown. Geometry = meaning! (5/9)
2
4
74
7,340
Lionel Naccache and I wrote a commentary on this work from a neuroscience perspective. You can read it here : unicog.org/a-global-workspac…
New Anthropic research: A global workspace in language models. Of everything happening in your brain right now, only a tiny fraction is consciously accessible—thoughts you can describe, hold in mind, and reason with. We found a strikingly similar divide inside Claude.
10
72
331
95,368
Joshua Batson retweeted
New research: language models develop a distinction between a small set of representations they can report on and reason with, and a much larger volume of automatic processing — a structure that closely mirrors global workspace theory. Some highlights 🧵
New Anthropic research: A global workspace in language models. Of everything happening in your brain right now, only a tiny fraction is consciously accessible—thoughts you can describe, hold in mind, and reason with. We found a strikingly similar divide inside Claude.
11
17
109
19,180
Joshua Batson retweeted
New Anthropic research: A global workspace in language models. Of everything happening in your brain right now, only a tiny fraction is consciously accessible—thoughts you can describe, hold in mind, and reason with. We found a strikingly similar divide inside Claude.
1,390
3,937
28,444
10,709,042