Eliciting Latent Predictions from Transformers with the Tuned Lens
On the map: Mechanistic interpretability → Knowledge and representations inside LLMs
Abstract (arXiv)
We analyze transformers from the perspective of iterative inference, seeking to understand how model predictions are refined layer by layer. To do so, we train an affine probe for each block in a frozen pretrained model, making it possible to decode every hidden state into a distribution over the vocabulary. Our method, the tuned lens, is a refinement of the earlier "logit lens" technique, which yielded useful insights but is often brittle. We test our method on various autoregressive language models with up to 20B parameters, showing it to be more predictive, reliable and unbiased than the logit lens. With causal experiments, we show the tuned lens uses similar features to the model itself. We also find the trajectory of latent predictions can be used to detect malicious inputs with high accuracy. All code needed to reproduce our results can be found at https://github.com/AlignmentResearch/tuned-lens.
Key facts. Cited by 623 papers in the map (data through 14 Oct 2026). Placed in Knowledge and representations inside LLMs, one of 13 directions in Mechanistic interpretability. Builds on 42 of its 77 references that are in the map. First posted on arXiv 14 Mar 2023.
Builds on
42 of 77 references.
References · 42
- 2017Attention Is All You Needcited by 60,361
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,307
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,984
- 2016Enriching Word Vectors with Subword Informationcited by 1,583
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,485
- 2016Understanding intermediate layers using linear classifier probescited by 1,353
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,336
30 more
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,165
- 2016Deep Networks with Stochastic Depthcited by 979
- 2022Toy Models of Superpositioncited by 971
- 2021Probing Classifiers: Promises, Shortcomings, and Advancescited by 876
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
- 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 713
- 2018An Empirical Study of Example Forgetting during Deep Neural Network Learningcited by 678
- 2019Designing and Interpreting Probes with Control Taskscited by 640
- 2021Knowledge Neurons in Pretrained Transformerscited by 601
- 2022Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Spacecited by 532
- 2019Reducing Transformer Depth on Demand with Structured Dropoutcited by 439
- 2022Emergent World Representations: Exploring a Sequence Model Trained on a Synthetic Taskcited by 431
- 2020DeeBERT: Dynamic Early Exiting for Accelerating BERT Inferencecited by 332
- 2022Confident Adaptive Language Modelingcited by 310
- 2014Understanding image representations by measuring their equivariance and equivalencecited by 243
- 2021Revisiting Model Stitching to Compare Neural Representationscited by 209
- 2021All Bark and No Bite: Rogue Dimensions in Transformer Language Models Obscure Representational Qualitycited by 156
- 2021Deep Learning Through the Lens of Example Difficultycited by 141
- 2022Analyzing Transformers in Embedding Spacecited by 132
- 2021BERT Busters: Outlier Dimensions that Disrupt Transformerscited by 112
- 2020Accelerating Training of Transformer-Based Language Models with Progressive Layer Droppingcited by 93
- 2021Similarity and Matching of Neural Network Representationscited by 78
- 2017Residual Connections Encourage Iterative Inferencecited by 77
- 2016Highway and Residual Networks learn Unrolled Iterative Estimationcited by 52
- 2017BPEmb: Tokenization-free Pre-trained Subword Embeddings in 275 Languagescited by 52
- 2022Datasheet for the Pilecited by 43
- 2021What if This Modified That? Syntactic Interventions via Counterfactual Embeddingscited by 39
- 2016Logical Inductioncited by 16
- 2019A Comparison of Semantic Similarity Methods for Maximum Human Interpretabilitycited by 9
Built on by
Citing papers per year: 2023: 44; 2024: 112; 2025: 129; 2026: 338.
623 papers.
Sort:
By area:
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 422
- 2023Emergent Linear Representations in World Models of Self-Supervised Sequence Modelscited by 319
- 2023Function Vectors in Large Language Modelscited by 308
- 2024Do Llamas Work in English? On the Latent Language of Multilingual Transformerscited by 281
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2024Semantic Entropy Probes: Robust and Cheap Hallucination Detection in LLMscited by 259
- 2024Patchscopes: A Unifying Framework for Inspecting Hidden Representations of Language Modelscited by 235
- 2024The Unreasonable Ineffectiveness of the Deeper Layerscited by 226
- 2024Not All Language Model Features Are One-Dimensionally Linearcited by 212
- 2023How does GPT-2 compute greater-than?: Interpreting mathematical abilities in a pre-trained language modelcited by 202
- 2023Linearity of Relation Decoding in Transformer Language Modelscited by 200
38 more
- 2023Localizing Model Behavior with Path Patchingcited by 195
- 2024Do Large Language Models Latently Perform Multi-Hop Reasoning?cited by 169
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
- 2023The Hydra Effect: Emergent Self-repair in Language Model Computationscited by 156
- 2023Does Circuit Analysis Interpretability Scale? Evidence from Multiple Choice Capabilities in Chinchillacited by 149
- 2023Emergent and Predictable Memorization in Large Language Modelscited by 148
- 2024The Remarkable Robustness of LLMs: Stages of Inference?cited by 146
- 2023Inspecting and Editing Knowledge Representations in Language Modelscited by 141
- 2024LaCo: Large Language Model Pruning via Layer Collapsecited by 126
- 2023Future Lens: Anticipating Subsequent Tokens from a Single Hidden Statecited by 121
- 2024A Practical Review of Mechanistic Interpretability for Transformer-Based Language Modelscited by 118
- 2024Rethinking Interpretability in the Era of Large Language Modelscited by 111
- 2024Interpreting and Editing Vision-Language Representations to Mitigate Hallucinationscited by 104
- 2024Universal Neurons in GPT2 Language Modelscited by 102
- 2024How Alignment and Jailbreak Work: Explain LLM Safety through Intermediate Hidden Statescited by 98
- 2024Representation Noising: A Defence Mechanism Against Harmful Finetuningcited by 96
- 2023Jump to Conclusions: Short-Cutting Transformers With Linear Transformationscited by 90
- 2023A Mechanistic Interpretation of Arithmetic Reasoning in Language Models using Causal Mediation Analysiscited by 89
- 2026Conditional Memory via Scalable Lookup: A New Axis of Sparsity for Large Language Modelscited by 86
- 2024A Primer on the Inner Workings of Transformer-based Language Modelscited by 85
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 83
- 2023Overthinking the Truth: Understanding how Language Models Process False Demonstrationscited by 81
- 2024Grokked Transformers are Implicit Reasoners: A Mechanistic Journey to the Edge of Generalizationcited by 79
- 2023Successor Heads: Recurring, Interpretable Attention Heads In The Wildcited by 77
- 2023Copy Suppression: Comprehensively Understanding an Attention Headcited by 76
- 2023The MiniPile Challenge for Data-Efficient Language Modelscited by 75
- 2026Verbalizable Representations Form a Global Workspace in Language Modelscited by 75
- 2024Get my drift? Catching LLM Task Drift with Activation Deltascited by 72
- 2024The Semantic Hub Hypothesis: Language Models Share Semantic Representations Across Languages and Modalitiescited by 69
- 2023Attention Satisfies: A Constraint-Satisfaction Lens on Factual Errors of Language Modelscited by 67
- 2024SelfIE: Self-Interpretation of Large Language Model Embeddingscited by 67
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 66
- 2023HI-TOM: A Benchmark for Evaluating Higher-Order Theory of Mind Reasoning in Large Language Modelscited by 63
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyondcited by 61
- 2024Spectral Filters, Dark Signals, and Attention Sinkscited by 56
- 2024Do LLMs Know about Hallucination? An Empirical Investigation of LLM's Hidden Statescited by 52
- 2024The Geometry of Concepts: Sparse Autoencoder Feature Structurecited by 52
- 2025Attention Sinks and Compression Valleys in LLMs are Two Sides of the Same Coincited by 52
50 most cited of 623 All 623 (JSON)
- 2026When Does Depth Help? Understanding Layerwise Inference in Tabular Foundation Models14 Oct 2026
- 2026ixi-sLM: On-Device sLM for AI Call Agent Service14 Oct 2026
- 2026DANGERLENS: Probing Dangerous Representations Hidden by Safety Alignment14 Oct 2026
- 2026Target-Token Asymmetry Can Masquerade As Depth Specialization14 Oct 2026
- 2026Not All Drift Is a Mechanism: Tracing Prompt Adaptation in LLMs13 Oct 2026
- 2026LoOPSD: On-Policy Self-Distillation with Looped Teachers13 Oct 2026
- 2026Monitoring latent reasoning in looped language models13 Oct 2026
- 2026The belief-action gap in language model agents12 Oct 2026
- 2026FunDM: Cheap & Label-Free Decision Models from Frozen Language Models12 Oct 2026
- 2026Where Is the "Self" of a Large Language Model? -- From Self-Index to Self-Reference12 Oct 2026
- 2026Running Fewer Loops Removes Refusal Behaviour in Recurrent-Depth Language Models10 Oct 2026
- 2026What Survives When Activation Steering Is Used as Memory10 Oct 2026
38 more
- 2026The Evidence Anchoring Boundary: Where Visual Interventions Matter and When They Help in Multimodal LLMs9 Oct 2026
- 2026Marformer: A Transformer for Predicting Missing Data Distributions8 Oct 2026
- 2026Cited but Not Consulted: A Counterfactual Audit of Legal Chain-of-Thought Faithfulness8 Oct 2026
- 2026RouterInterp: Understanding Superposed Specialisation in Mixture of Experts Routing8 Oct 2026
- 2026Does Modern Standard Arabic (MSA) Dominate Arabic Dialects in LLMs? A Representation-Level Analysis8 Oct 2026
- 2026How Do Agentic LLMs Decide to Call Tools? A Tool-Call Vector Shaped by Suppression7 Oct 2026
- 2026Certified by Abstention: Distribution-Free Guarantees for Chain-of-Thought Verifiers at Small Calibration Budgets7 Oct 2026
- 2026U-Space: Uncovering When and Why Uncertainty Arises in Language Models6 Oct 2026
- 2026Closing the Context Gap: Activation Alignment for Tabular In-Context Learning5 Oct 2026
- 2026Mind the Gaps: From Failure Attribution to Closed-Form Repair of Code Language Models4 Oct 2026
- 2026RoMod: Temporal Routing Modulation via Mixture-of-Experts for Video Anomaly Detection4 Oct 2026
- 2026Representation--Behavior Alignment for Explainable Weakly-Supervised Video Anomaly Detection4 Oct 2026
- 2026Belief-Trajectory Energy: Measuring the Path to a Prediction4 Oct 2026
- 2026Dynamic Routing as a New Dimension for Test-time Versatility of LLMs3 Oct 2026
- 2026Extracting Persona Subspaces Through Iterative Nullspace Projection For Modulation3 Oct 2026
- 2026DV-Lens: Revealing the Functional Organization of Language Model Parameters3 Oct 2026
- 2026From Latent Space to Jacobian Space: Measuring, Evading, and Training Against Safety-Content Accessibility3 Oct 2026
- 2026hacktrace: behavior-supervised detection of reward hacking during code generation2 Oct 2026
- 2026Silent Dissent: LLM Agents That Yield to the Majority Still Represent Their Original Premise2 Oct 2026
- 2026Every Ablation Is a Dose: Counterweights and the Semblance of Self-Repair1 Oct 2026
- 2026Harnessing Domain Specialists in Multimodal Mixture-of-Experts for Efficient Adaptation1 Oct 2026
- 2026Probe with Participation Trophies: Random-Reward RL as a Probe of LLM Capability1 Oct 2026
- 2026AnyJev Technical Report30 Sep 2026
- 2026Concept Subspaces Compute Beyond the Logit Lens: A Weights-Only Test for Locating Representations Upstream of Readout30 Sep 2026
- 2026Making LLMs Say What They Think: Measuring and Improving CoT-Interpretability Alignment30 Sep 2026
- 2026CRAFT: Causal Responsibility and Failure Tracing in Medical Vision Language Models30 Sep 2026
- 2026OPMD: On-Policy Mechanism Distillation Beyond Output Supervision29 Sep 2026
- 2026LoopVL: Recurrent Visual Intelligence29 Sep 2026
- 2026The Geometry of Inference in Transformer Residual Streams29 Sep 2026
- 2026Weights Read and Write Features: Scalable Parameter Decomposition Grounded in Activation Space29 Sep 2026
- 2026Reliable Parallel Decoding in Masked Diffusion Language Models29 Sep 2026
- 2026SOLO: Pretraining Billion-Parameter Language Models with Shared-Output Local Learning28 Sep 2026
- 2026TULIP: Targeted LLM Unlearning at Layers Identified Per-Input28 Sep 2026
- 2026Commutator Memory: Sparse, Path-Local Reading and Steering in Language Models28 Sep 2026
- 2026Hidden Activations are not Enough I: Knowledge Matrices as Higher Representations28 Sep 2026
- 2026Agent Safety From Within: Detecting Harmful Trajectories from LLM Internal States27 Sep 2026
- 2026Model-Aware Data Selection from In-and-Out Information Interplay26 Sep 2026
- 2026The Alignment Paradox: How Post-Training Amplifies Confident Hallucinations in Language Models26 Sep 2026
50 newest of 623 All 623 (JSON)
- 2024The Unreasonable Ineffectiveness of the Deeper Layerscited by 226
- 2024Do Large Language Models Latently Perform Multi-Hop Reasoning?cited by 169
- 2024Rethinking Interpretability in the Era of Large Language Modelscited by 111
- 2023A Mechanistic Interpretation of Arithmetic Reasoning in Language Models using Causal Mediation Analysiscited by 89
- 2023Overthinking the Truth: Understanding how Language Models Process False Demonstrationscited by 81
- 2024Grokked Transformers are Implicit Reasoners: A Mechanistic Journey to the Edge of Generalizationcited by 79
- 2023HI-TOM: A Benchmark for Evaluating Higher-Order Theory of Mind Reasoning in Large Language Modelscited by 63
- 2025Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyondcited by 61
- 2024Understanding and Patching Compositional Reasoning in LLMscited by 46
- 2024Understanding the Dark Side of LLMs' Intrinsic Self-Correctioncited by 42
- 2024Beyond English-Centric LLMs: What Language Do Multilingual Language Models Think in?cited by 41
- 2024Pre-trained Large Language Models Use Fourier Features to Compute Additioncited by 39
12 most cited of 83 All 83 (JSON)
- 2026Monitoring latent reasoning in looped language models13 Oct 2026
- 2026Cited but Not Consulted: A Counterfactual Audit of Legal Chain-of-Thought Faithfulness8 Oct 2026
- 2026Certified by Abstention: Distribution-Free Guarantees for Chain-of-Thought Verifiers at Small Calibration Budgets7 Oct 2026
- 2026Dynamic Routing as a New Dimension for Test-time Versatility of LLMs3 Oct 2026
- 2026Making LLMs Say What They Think: Measuring and Improving CoT-Interpretability Alignment30 Sep 2026
- 2026Rethinking Pivot Programming Languages in Code Language Models19 Sep 2026
- 2026Do Chess Explanations Reflect Model Decisions? Behavioral and Token-Level Tests of LLM Reasoning Faithfulness5 Sep 2026
- 2026Lingua Franca or Probing Artifact? Rethinking Latent Language in Multilingual LLMs31 Aug 2026
- 2026Wrong Prediction, Right Answer: Recovering Evidence from Collapsed LLM Sequence Scores31 Aug 2026
- 2026SCIT: Testing Causal Cache Carriers in Latent Chain-of-Thought Models27 Aug 2026
- 2026Can We Read the Mind of an Audio LLM? A Verbalizable, Multilingual Middle-Layer Workspace25 Aug 2026
- 2026Reasoning Errors Have a Region and a Direction in the Residual-Stream Trajectory of LLMs6 Aug 2026
12 newest of 83 All 83 (JSON)
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 422
- 2024Patchscopes: A Unifying Framework for Inspecting Hidden Representations of Language Modelscited by 235
- 2024A Practical Review of Mechanistic Interpretability for Transformer-Based Language Modelscited by 118
- 2024Universal Neurons in GPT2 Language Modelscited by 102
- 2024Spectral Filters, Dark Signals, and Attention Sinkscited by 56
- 2024The Geometry of Concepts: Sparse Autoencoder Feature Structurecited by 52
- 2025From Flat to Hierarchical: Extracting Sparse Representations with Matching Pursuitcited by 49
- 2024Towards Unifying Interpretability and Control: Evaluation via Interventioncited by 32
- 2025Large Language Models Are Human-Like Internallycited by 29
- 2024The Same But Different: Structural Similarities and Differences in Multilingual Language Modelingcited by 28
- 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Modelscited by 27
- 2024On Behalf of the Stakeholders: Trends in NLP Model Interpretability in the Era of LLMscited by 25
12 most cited of 69 All 69 (JSON)
- 2026What Survives When Activation Steering Is Used as Memory10 Oct 2026
- 2026Concept Subspaces Compute Beyond the Logit Lens: A Weights-Only Test for Locating Representations Upstream of Readout30 Sep 2026
- 2026Adaptive Multi-Value Control in LLMs via Causal Activation Steering24 Sep 2026
- 2026Contrastive Projection: Reading Transformer Internals by Differencing Logit Lenses9 Sep 2026
- 2026LLM Layers Immediately Correct Each Other7 Sep 2026
- 2026AutoLexSteer: Automatic Contrast Construction for Lexical Activation Steering6 Sep 2026
- 2026Capsule Lens: Locating and Tracking Concept Geometry in Model Representations4 Sep 2026
- 2026RACE: Scalable Statistical Estimation of Functional Consistency in LLM Neurons25 Aug 2026
- 2026Read-Best Is Not Steer-Best: A Probing--Steering Layer Dissociation in Omni-Modal Large Language Models24 Aug 2026
- 2026What Does Activation Steering Control? Attribution Across Answer Encodings and Output-Sensitive Subspaces24 Aug 2026
- 2026MI-MIDI: Mechanistic Interpretability of Text-to-MIDI Generation Models via Probing, Lenses and Steering6 Aug 2026
- 2026Recovering Lesion Parameters from Aphasic Picture Naming Error Profiles in Large Language Models5 Aug 2026
12 newest of 69 All 69 (JSON)
- 2024Interpreting and Editing Vision-Language Representations to Mitigate Hallucinationscited by 104
- 2024A Concept-Based Explainability Framework for Large Multimodal Modelscited by 39
- 2024Unveiling Visual Perception in Language Models: An Attention Head Analysis Approachcited by 35
- 2025A Survey on Mechanistic Interpretability for Multi-Modal Foundation Modelscited by 34
- 2025Pixels Versus Priors: Controlling Knowledge Priors in Vision-Language Models through Visual Counterfactscited by 32
- 2024MMNeuron: Discovering Neuron-Level Domain-Specific Interpretation in Multimodal Large Language Modelcited by 26
- 2025Head Pursuit: Probing Attention Specialization in Multimodal Transformerscited by 17
- 2025Analyzing Finetuning Representation Shift for Multimodal LLMs Steeringcited by 16
- 2024Enhancing Vision-Language Model Reliability with Uncertainty-Guided Dropout Decodingcited by 15
- 2026LatentLens: Revealing Highly Interpretable Visual Tokens in LLMscited by 15
- 2025When Seeing Overrides Knowing: Disentangling Knowledge Conflicts in Vision-Language Modelscited by 11
- 2026Arbitration Failure, Not Perceptual Blindness: How Vision-Language Models Resolve Visual-Linguistic Conflictscited by 11
12 most cited of 44 All 44 (JSON)
- 2026The Evidence Anchoring Boundary: Where Visual Interventions Matter and When They Help in Multimodal LLMs9 Oct 2026
- 2026Representation--Behavior Alignment for Explainable Weakly-Supervised Video Anomaly Detection4 Oct 2026
- 2026CRAFT: Causal Responsibility and Failure Tracing in Medical Vision Language Models30 Sep 2026
- 2026Decodable but Misrouted: Sparse Features Uncover a Readout Gap in Vision-Language Models for Harmful Meme Detection16 Sep 2026
- 2026VisLens: Single-Pass Interpretable Visual Search for Multimodal LLMs31 Aug 2026
- 2026PatchGate: Narrowing the Verbalization Gap with Intrinsic Object Inventories in Frozen Vision-Language Models22 Aug 2026
- 2026Latent Ordinal Evidence, Misaligned Outputs: Inference-Time Ordinal Lens Alignment for Multimodal LLMs21 Aug 2026
- 2026Beyond Tokens: A Survey on Decoding Methods for Large Language and Vision-Language Models14 Aug 2026
- 2026Not All Redundant Tokens Are Alike: Analyzing Visual Token Pruning through Token Roles5 Aug 2026
- 2026Brand-as-Memory: Vision-Language Models Encode Causal, Mechanistically Localizable Credibility Priors for News Sources3 Jul 2026
- 2026FADE: Mitigating Hallucinations by Reducing Language-Prior Dominance in Large Vision-Language Models28 Jun 2026
- 2026ABACUS: Adapting Unified Foundation Model for Bridging Image Count Understanding and Generation22 Jun 2026
12 newest of 44 All 44 (JSON)
- 2024Representation Noising: A Defence Mechanism Against Harmful Finetuningcited by 96
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metricscited by 83
- 2023Self-Detoxifying Language Models via Toxification Reversalcited by 46
- 2024Dissecting Language Models: Machine Unlearning via Selective Pruningcited by 42
- 2025Representation Bending for Large Language Model Safetycited by 30
- 2025SafeSwitch: Steering Unsafe LLM Behavior via Internal Activation Signalscited by 29
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methodscited by 27
- 2024Embedding-based classifiers can detect prompt injection attackscited by 27
- 2024JailbreakLens: Interpreting Jailbreak Mechanism in the Lens of Representation and Circuitcited by 22
- 2025ReLearn: Unlearning via Learning for Large Language Modelscited by 22
- 2024When Backdoors Speak: Understanding LLM Backdoor Attacks Through Model-Generated Explanationscited by 20
- 2024A Causal Explainable Guardrails for Large Language Modelscited by 18
12 most cited of 25 All 25 (JSON)
- 2026Running Fewer Loops Removes Refusal Behaviour in Recurrent-Depth Language Models10 Oct 2026
- 2026TULIP: Targeted LLM Unlearning at Layers Identified Per-Input28 Sep 2026
- 2026Measure, Don't Optimize: Forecasting Recovery in LLM Unlearning11 Aug 2026
- 2026Silent Alarm: A J-Space Protocol for Comparing Danger Recognition Across Models and Quantization Levels14 Jul 2026
- 2026Neuron-Anchored Rule Extraction for Large Language Models via Contrastive Hierarchical Ablation4 May 2026
- 2026LLM Safety From Within: Detecting Harmful Content with Internal Representations20 Apr 2026
- 2026Amnesia: Adversarial Semantic Layer Specific Activation Steering in Large Language Models10 Mar 2026
- 2025Understanding and Mitigating Over-refusal for Large Language Models via Representation Intervention24 Nov 2025
- 2025MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMs10 Nov 2025
- 2025Understanding the Dilemma of Unlearning for Large Language Models29 Sep 2025
- 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun 2025
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety5 Jun 2025
12 newest of 25 All 25 (JSON)
- 2024How Alignment and Jailbreak Work: Explain LLM Safety through Intermediate Hidden Statescited by 98
- 2024No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attackscited by 29
- 2026Mechanistic Interpretability for Large Language Model Alignment: Progress, Challenges, and Future Directionscited by 8
- 2023CRaSh: Clustering, Removing, and Sharing Enhance Fine-tuning without Full Large Language Modelcited by 5
- 2024Model-Editing-Based Jailbreak against Safety-aligned Large Language Modelscited by 4
- 2026Deeper is Not Always Better: Mitigating the Alignment Tax via Confident Layer Decodingcited by 2
- 2026Layerwise Convergence Fingerprints for Runtime Misbehavior Detection in Large Language Modelscited by 1
- 2026Where Pretraining writes and Alignment reads: the asymmetry of Transformer weight spacecited by 1
- 2026What Intermediate Layers Know: Detecting Jailbreaks from Entropy Dynamicscited by 1
- 2026Wrong Before Right: Late Rescue and Interface Failure in Aligned Language Modelscited by 1
- 2026Knowing, and Saying It Only When Asked: LLM Endognostics and the Schizognosis of Minerva-7Bcited by 1
- 2026PermaFrost-Attack: Stealth Pretraining Seeding(SPS) for planting Logic Landmines During LLM Trainingcited by 0
12 most cited of 15 All 15 (JSON)
- 2026DANGERLENS: Probing Dangerous Representations Hidden by Safety Alignment14 Oct 2026
- 2026The Alignment Paradox: How Post-Training Amplifies Confident Hallucinations in Language Models26 Sep 2026
- 2026Knowing, and Saying It Only When Asked: LLM Endognostics and the Schizognosis of Minerva-7B2 Sep 2026
- 2026Wrong Before Right: Late Rescue and Interface Failure in Aligned Language Models6 Jul 2026
- 2026What Intermediate Layers Know: Detecting Jailbreaks from Entropy Dynamics23 Jun 2026
- 2026Deeper is Not Always Better: Mitigating the Alignment Tax via Confident Layer Decoding20 Jun 2026
- 2026Where Pretraining writes and Alignment reads: the asymmetry of Transformer weight space15 May 2026
- 2026Safety Anchor: Defending Harmful Fine-tuning via Geometric Bottlenecks7 May 2026
- 2026Layerwise Convergence Fingerprints for Runtime Misbehavior Detection in Large Language Models27 Apr 2026
- 2026PermaFrost-Attack: Stealth Pretraining Seeding(SPS) for planting Logic Landmines During LLM Training23 Apr 2026
- 2026Mechanistic Interpretability for Large Language Model Alignment: Progress, Challenges, and Future Directions21 Jan 2026
- 2024Model-Editing-Based Jailbreak against Safety-aligned Large Language Models11 Dec 2024
12 newest of 15 All 15 (JSON)
- 2025MICE for CATs: Model-Internal Confidence Estimation for Calibrating Agents with Toolscited by 15
- 2026Plans Don't Persist: Why Context Management Is Load Bearing for LLM Agentscited by 4
- 2026Not Just RLHF: Why Alignment Alone Won't Fix Multi-Agent Sycophancycited by 3
- 2026Tool-Call Dependency Structure is Linearly Decodable in LLM Agent Residual Streamscited by 1
- 2026Latent Programming Horizons in Coding Agentscited by 1
- 2026Do GUI Agents Know When Not to Act? Enabling Conflict-Aware Termination for Multimodal GUI Agentscited by 0
- 2026Agent Safety From Within: Detecting Harmful Trajectories from LLM Internal Statescited by 0
- 2026Silent Dissent: LLM Agents That Yield to the Majority Still Represent Their Original Premisecited by 0
- 2026hacktrace: behavior-supervised detection of reward hacking during code generationcited by 0
- 2026How Do Agentic LLMs Decide to Call Tools? A Tool-Call Vector Shaped by Suppressioncited by 0
- 2026The belief-action gap in language model agentscited by 0
- 2026ixi-sLM: On-Device sLM for AI Call Agent Servicecited by 0
- 2026ixi-sLM: On-Device sLM for AI Call Agent Service14 Oct 2026
- 2026The belief-action gap in language model agents12 Oct 2026
- 2026How Do Agentic LLMs Decide to Call Tools? A Tool-Call Vector Shaped by Suppression7 Oct 2026
- 2026hacktrace: behavior-supervised detection of reward hacking during code generation2 Oct 2026
- 2026Silent Dissent: LLM Agents That Yield to the Majority Still Represent Their Original Premise2 Oct 2026
- 2026Agent Safety From Within: Detecting Harmful Trajectories from LLM Internal States27 Sep 2026
- 2026Do GUI Agents Know When Not to Act? Enabling Conflict-Aware Termination for Multimodal GUI Agents3 Sep 2026
- 2026Latent Programming Horizons in Coding Agents6 Jul 2026
- 2026Plans Don't Persist: Why Context Management Is Load Bearing for LLM Agents22 Jun 2026
- 2026Tool-Call Dependency Structure is Linearly Decodable in LLM Agent Residual Streams25 May 2026
- 2026Not Just RLHF: Why Alignment Alone Won't Fix Multi-Agent Sycophancy13 May 2026
- 2025MICE for CATs: Model-Internal Confidence Estimation for Calibrating Agents with Tools28 Apr 2025
- 2026Conditional Memory via Scalable Lookup: A New Axis of Sparsity for Large Language Modelscited by 86
- 2026Training-Free Looped Transformerscited by 15
- 2025Learning to Skip the Middle Layers of Transformerscited by 10
- 2026MoE Lens -- An Expert Is All You Needcited by 6
- 2026L3: Large Lookup Layerscited by 2
- 2026Harnessing Domain Specialists in Multimodal Mixture-of-Experts for Efficient Adaptationcited by 0
- 2026RoMod: Temporal Routing Modulation via Mixture-of-Experts for Video Anomaly Detectioncited by 0
- 2026RouterInterp: Understanding Superposed Specialisation in Mixture of Experts Routingcited by 0
- 2026Not All Drift Is a Mechanism: Tracing Prompt Adaptation in LLMscited by 0
- 2026Not All Drift Is a Mechanism: Tracing Prompt Adaptation in LLMs13 Oct 2026
- 2026RouterInterp: Understanding Superposed Specialisation in Mixture of Experts Routing8 Oct 2026
- 2026RoMod: Temporal Routing Modulation via Mixture-of-Experts for Video Anomaly Detection4 Oct 2026
- 2026Harnessing Domain Specialists in Multimodal Mixture-of-Experts for Efficient Adaptation1 Oct 2026
- 2026Training-Free Looped Transformers22 May 2026
- 2026MoE Lens -- An Expert Is All You Need6 Mar 2026
- 2026L3: Large Lookup Layers29 Jan 2026
- 2026Conditional Memory via Scalable Lookup: A New Axis of Sparsity for Large Language Models12 Jan 2026
- 2025Learning to Skip the Middle Layers of Transformers26 Jun 2025
- 2025Early-Exit and Instant Confidence Translation Quality Estimationcited by 2
- 2023Leveraging Speculative Sampling and KV-Cache Optimizations Together for Generative AI using OpenVINOcited by 1
- 2026LoRA-Drop: Temporal LoRA Decoding for Efficient LLM Inferencecited by 1
- 2026DecodeShare: Tracing the Shared Subspace of LLM Decode-Time Decisionscited by 1
- 2025SimLens for Early Exit in Large Language Models: Eliciting Accurate Latent Predictions with One More Tokencited by 0
- 2026SPAR-K: Scheduled Periodic Alternating Early Exit for Spoken Language Modelscited by 0
- 2026FrankenReport: Early Exiting in Long-Form Generation Using Expected Value of Computationcited by 0
- 2026FrankenReport: Early Exiting in Long-Form Generation Using Expected Value of Computation6 Sep 2026
- 2026DecodeShare: Tracing the Shared Subspace of LLM Decode-Time Decisions21 May 2026
- 2026SPAR-K: Scheduled Periodic Alternating Early Exit for Spoken Language Models10 Mar 2026
- 2026LoRA-Drop: Temporal LoRA Decoding for Efficient LLM Inference5 Jan 2026
- 2025SimLens for Early Exit in Large Language Models: Eliciting Accurate Latent Predictions with One More Token23 Jul 2025
- 2025Early-Exit and Instant Confidence Translation Quality Estimation20 Feb 2025
- 2023Leveraging Speculative Sampling and KV-Cache Optimizations Together for Generative AI using OpenVINO8 Nov 2023
- 2024Get my drift? Catching LLM Task Drift with Activation Deltascited by 72
- 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacycited by 10
- 2026FACTUM: Mechanistic Detection of Citation Hallucination in Long-Form RAGcited by 6
- 2026Evidence Integration in Large Language Modelscited by 2
- 2025LFD: Layer Fused Decoding to Exploit External Knowledge in Retrieval-Augmented Generationcited by 0
- 2026Only Pay What You Must Spend: On-Demand Privacy Budget Payment for Differentially Private RAGcited by 0
- 2026Only Pay What You Must Spend: On-Demand Privacy Budget Payment for Differentially Private RAG23 Sep 2026
- 2026Evidence Integration in Large Language Models3 Sep 2026
- 2026FACTUM: Mechanistic Detection of Citation Hallucination in Long-Form RAG9 Jan 2026
- 2025LFD: Layer Fused Decoding to Exploit External Knowledge in Retrieval-Augmented Generation27 Aug 2025
- 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacy30 Jun 2025
- 2024Get my drift? Catching LLM Task Drift with Activation Deltas2 Jun 2024
- 2024Does Transformer Interpretability Transfer to RNNs?cited by 9
- 2026Interpreting and Steering State-Space Models via Activation Subspace Bottleneckscited by 3
- 2025Differential Mambacited by 2
- 2026Density Field State Space Models: 1-Bit Distillation, Efficient Inference, and Knowledge Organization in Mamba-2cited by 0
- 2026Residual Streams Read, Recurrent States Remember: The Global Workspace in Mamba Modelscited by 0
- 2026Residual Streams Read, Recurrent States Remember: The Global Workspace in Mamba Models26 Sep 2026
- 2026Density Field State Space Models: 1-Bit Distillation, Efficient Inference, and Knowledge Organization in Mamba-228 Apr 2026
- 2026Interpreting and Steering State-Space Models via Activation Subspace Bottlenecks26 Feb 2026
- 2025Differential Mamba8 Jul 2025
- 2024Does Transformer Interpretability Transfer to RNNs?9 Apr 2024
- 2024Diffusion Lens: Interpreting Text Encoders in Text-to-Image Pipelinescited by 30
- 2026Text Template Tokens Are Implicit Semantic Registers in Diffusion Transformerscited by 4
- 2026Steering Without Breaking: Mechanistically Informed Interventions for Discrete Diffusion Language Modelscited by 3
- 2026Reliable Parallel Decoding in Masked Diffusion Language Modelscited by 0
- 2026Reliable Parallel Decoding in Masked Diffusion Language Models29 Sep 2026
- 2026Text Template Tokens Are Implicit Semantic Registers in Diffusion Transformers21 Jul 2026
- 2026Steering Without Breaking: Mechanistically Informed Interventions for Discrete Diffusion Language Models8 May 2026
- 2024Diffusion Lens: Interpreting Text Encoders in Text-to-Image Pipelines9 Mar 2024
- 2026Task-Specific Knowledge Distillation via Intermediate Probescited by 2
- 2026Neuron-Aware Data Selection for Annotation-Free LLM Self-Distillationcited by 1
- 2026OPMD: On-Policy Mechanism Distillation Beyond Output Supervisioncited by 0
- 2026LoOPSD: On-Policy Self-Distillation with Looped Teacherscited by 0
- 2026LoOPSD: On-Policy Self-Distillation with Looped Teachers13 Oct 2026
- 2026OPMD: On-Policy Mechanism Distillation Beyond Output Supervision29 Sep 2026
- 2026Neuron-Aware Data Selection for Annotation-Free LLM Self-Distillation2 Jul 2026
- 2026Task-Specific Knowledge Distillation via Intermediate Probes18 Feb 2026
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2023Function Vectors in Large Language Modelscited by 308
- 2024Do Llamas Work in English? On the Latent Language of Multilingual Transformerscited by 281
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2024Semantic Entropy Probes: Robust and Cheap Hallucination Detection in LLMscited by 259
- 2024Not All Language Model Features Are One-Dimensionally Linearcited by 212
- 2023How does GPT-2 compute greater-than?: Interpreting mathematical abilities in a pre-trained language modelcited by 202
- 2023Linearity of Relation Decoding in Transformer Language Modelscited by 200
- 2023Localizing Model Behavior with Path Patchingcited by 195
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
- 2023The Hydra Effect: Emergent Self-repair in Language Model Computationscited by 156
- 2023Does Circuit Analysis Interpretability Scale? Evidence from Multiple Choice Capabilities in Chinchillacited by 149
12 most cited of 335 All 335 (JSON)
- 2026When Does Depth Help? Understanding Layerwise Inference in Tabular Foundation Models14 Oct 2026
- 2026Target-Token Asymmetry Can Masquerade As Depth Specialization14 Oct 2026
- 2026FunDM: Cheap & Label-Free Decision Models from Frozen Language Models12 Oct 2026
- 2026Where Is the "Self" of a Large Language Model? -- From Self-Index to Self-Reference12 Oct 2026
- 2026Marformer: A Transformer for Predicting Missing Data Distributions8 Oct 2026
- 2026Does Modern Standard Arabic (MSA) Dominate Arabic Dialects in LLMs? A Representation-Level Analysis8 Oct 2026
- 2026U-Space: Uncovering When and Why Uncertainty Arises in Language Models6 Oct 2026
- 2026Closing the Context Gap: Activation Alignment for Tabular In-Context Learning5 Oct 2026
- 2026Mind the Gaps: From Failure Attribution to Closed-Form Repair of Code Language Models4 Oct 2026
- 2026Belief-Trajectory Energy: Measuring the Path to a Prediction4 Oct 2026
- 2026Extracting Persona Subspaces Through Iterative Nullspace Projection For Modulation3 Oct 2026
- 2026DV-Lens: Revealing the Functional Organization of Language Model Parameters3 Oct 2026
12 newest of 335 All 335 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Thinking into the Future: Latent Lookahead Training for Transformers
- 2025Closed-Loop Transformers: Autoregressive Modeling as Iterative Latent Equilibrium
- 2025Transformers Don't Need LayerNorm at Inference Time: Scaling LayerNorm Removal to GPT-2 XL and the Implications for Mechanistic Interpretability
- 2026Learn from your own latents and not from tokens: A sample-complexity theory
- 2026Reasoning with Latent Tokens in Diffusion Language Models
- 2026At the Edge of Understanding: Sparse Autoencoders Trace The Limits of Transformer Generalization
- 2026SNLP: Layer-Parallel Inference via Structured Newton Corrections
- 2026Score × Decoder: A Unified View of Unsupervised Inference-Time Scaling for Hallucination Mitigation