Benchmarks for Detecting Measurement Tampering
Not on the map. Why?
Abstract (arXiv)
When training powerful AI systems to perform complex tasks, it may be challenging to provide training signals which are robust to optimization. One concern is textitmeasurement tampering, where the AI system manipulates multiple measurements to create the illusion of good results instead of achieving the desired outcome. In this work, we build four new text-based datasets to evaluate measurement tampering detection techniques on large language models. Concretely, given sets of text inputs and measurements aimed at determining if some outcome occurred, as well as a base model able to accurately predict measurements, the goal is to determine if examples where all measurements indicate the outcome occurred actually had the outcome occur, or if this was caused by measurement tampering. We demonstrate techniques that outperform simple baselines on most datasets, but don't achieve maximum performance. We believe there is significant room for improvement for both techniques and datasets, and we are excited for future work tackling measurement tampering.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 23 of its 33 references that are in the map. First posted on arXiv 29 Aug 2023.
Builds on
23 of 33 references.
References · 23
- 2023GPT-4 Technical Reportcited by 18,396
- 2021Program Synthesis with Large Language Modelscited by 3,637
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,274
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2023Steering Language Models With Activation Engineeringcited by 922
- 2021Measuring Coding Challenge Competence With APPScited by 902
- 2022Solving math word problems with process- and outcome-based feedbackcited by 901
- 2022CodeGen: An Open Large Language Model for Code with Multi-Turn Program Synthesiscited by 885
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 767
- 2023PyTorch FSDP: Experiences on Scaling Fully Sharded Data Parallelcited by 660
- 2018Detecting Backdoor Attacks on Deep Neural Networks by Activation Clusteringcited by 456
- 2020Backdoor Learning: A Surveycited by 426
11 more
- 2022Last Layer Re-Training is Sufficient for Robustness to Spurious Correlationscited by 381
- 2019Deep Learning for Anomaly Detection: A Surveycited by 358
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2013A Survey on Multi-view Learningcited by 152
- 2020Neural Unsupervised Domain Adaptation in NLP---A Surveycited by 144
- 2022Formal Mathematics Statement Curriculum Learningcited by 142
- 2020An Empirical Study on Robustness to Spurious Correlations using Pre-trained Language Modelscited by 134
- 2022BackdoorBench: A Comprehensive Benchmark of Backdoor Learningcited by 128
- 2019Reward Tampering Problems and Solutions in Reinforcement Learning: A Causal Influence Diagram Perspectivecited by 108
- 2021Consequences of Misaligned AIcited by 80
- 2022Formalizing the presumption of independencecited by 8
Built on by
Citing papers per year: 2024: 2; 2025: 3; 2026: 1.
6 papers.
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 47
- 2025Reasoning Under Pressure: How do Training Incentives Influence Chain-of-Thought Monitorability?cited by 9
- 2025Mechanistic Anomaly Detection for "Quirky" Language Modelscited by 5
- 2024Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systemscited by 2
- 2025Towards Integrated Alignmentcited by 0
- 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Executioncited by 0
- 2026PyINE: A Framework for Scalable Elicitation and Oversight via Code Execution3 Oct 2026
- 2025Reasoning Under Pressure: How do Training Incentives Influence Chain-of-Thought Monitorability?28 Nov 2025
- 2025Towards Integrated Alignment8 Aug 2025
- 2025Mechanistic Anomaly Detection for "Quirky" Language Models9 Apr 2025
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedback4 Nov 2024
- 2024Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems30 Oct 2024