Copy Suppression: Comprehensively Understanding an Attention Head
Not on the map. Why?
Abstract (arXiv)
We present a single attention head in GPT-2 Small that has one main role across the entire training distribution. If components in earlier layers predict a certain token, and this token appears earlier in the context, the head suppresses it: we call this copy suppression. Attention Head 10.7 (L10H7) suppresses naive copying behavior which improves overall model calibration. This explains why multiple prior works studying certain narrow tasks found negative heads that systematically favored the wrong answer. We uncover the mechanism that the Negative Heads use for copy suppression with weights-based evidence and are able to explain 76.9% of the impact of L10H7 in GPT-2 Small. To the best of our knowledge, this is the most comprehensive description of the complete role of a component in a language model to date. One major effect of copy suppression is its role in self-repair. Self-repair refers to how ablating crucial model components results in downstream neural network parts compensating for this ablation. Copy suppression leads to self-repair: if an initial overconfident copier is ablated, then there is nothing to suppress. We show that self-repair is implemented by several mechanisms, one of which is copy suppression, which explains 39% of the behavior in a narrow task. Interactive visualisations of the copy suppression phenomena may be seen at our web app https://copy-suppression.streamlit.app/
Key facts. Cited by 73 papers in the map (data through 7 Oct 2026). Builds on 20 of its 41 references that are in the map. First posted on arXiv 6 Oct 2023.
Builds on
20 of 41 references.
References · 20
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
- 2022In-context Learning and Induction Headscited by 930
- 2019Analyzing Multi-Head Self-Attention: Specialized Heads Do the Heavy Lifting, the Rest Can Be Prunedcited by 844
- 2017Network Dissection: Quantifying Interpretability of Deep Visual Representationscited by 703
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 700
- 2020Towards Faithfully Interpretable NLP Systems: How should we define and evaluate faithfulness?cited by 590
- 2023Eliciting Latent Predictions from Transformers with the Tuned Lenscited by 579
- 2023Finding Neurons in a Haystack: Case Studies with Sparse Probingcited by 328
- 2019A Multiscale Visualization of Attention in the Transformer Modelcited by 292
- 2023How does GPT-2 compute greater-than?: Interpreting mathematical abilities in a pre-trained language modelcited by 199
- 2023Localizing Model Behavior with Path Patchingcited by 182
- 2020Compositional Explanations of Neuronscited by 172
8 more
- 2017Learning to Generate Reviews and Discovering Sentimentcited by 147
- 2023The Hydra Effect: Emergent Self-repair in Language Model Computationscited by 145
- 2022Analyzing Transformers in Embedding Spacecited by 131
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2021An Interpretability Illusion for BERTcited by 94
- 2023Overthinking the Truth: Understanding how Language Models Process False Demonstrationscited by 78
- 2016Highway and Residual Networks learn Unrolled Iterative Estimationcited by 52
- 2023Uncertainty in Natural Language Processing: Sources, Quantification, and Applicationscited by 44
Built on by
Citing papers per year: 2023: 2; 2024: 31; 2025: 19; 2026: 21.
73 papers.
Sort:
By area:
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 415
- 2024How to use and interpret activation patchingcited by 191
- 2024Transcoders Find Interpretable LLM Feature Circuitscited by 186
- 2024Improving Dictionary Learning with Gated Sparse Autoencoderscited by 171
- 2024The Remarkable Robustness of LLMs: Stages of Inference?cited by 138
- 2024A Practical Review of Mechanistic Interpretability for Transformer-Based Language Modelscited by 113
- 2024Are self-explanations from Large Language Models faithful?cited by 101
- 2024Universal Neurons in GPT2 Language Modelscited by 100
- 2024AtP*: An efficient and scalable method for localizing LLM behaviour to componentscited by 100
- 2024ReDeEP: Detecting Hallucination in Retrieval-Augmented Generation via Mechanistic Interpretabilitycited by 100
- 2024Arithmetic Without Algorithms: Language Models Solve Math With a Bag of Heuristicscited by 94
- 2024A Primer on the Inner Workings of Transformer-based Language Modelscited by 83
38 more
- 2023Successor Heads: Recurring, Interpretable Attention Heads In The Wildcited by 77
- 2024Attention Heads of Large Language Models: A Surveycited by 65
- 2024LLM Circuit Analyses Are Consistent Across Training and Scalecited by 60
- 2024LoFiT: Localized Fine-tuning on LLM Representationscited by 56
- 2025Do Language Models Use Their Depth Efficiently?cited by 48
- 2024Competition of Mechanisms: Tracing How Language Models Handle Facts and Counterfactualscited by 40
- 2024Extending Activation Steering to Broad Skills and Multiple Behaviourscited by 36
- 2025PolyPythias: Stability and Outliers across Fifty Language Model Pre-Training Runscited by 33
- 2025Query-Focused Retrieval Heads Improve Long-Context Reasoning and Re-rankingcited by 30
- 2024No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attackscited by 28
- 2024The Same But Different: Structural Similarities and Differences in Multilingual Language Modelingcited by 27
- 2025Taming Knowledge Conflicts in Language Modelscited by 27
- 2024Optimal ablation for interpretabilitycited by 21
- 2025Towards Understanding Fine-Tuning Mechanisms of LLMs via Circuit Analysiscited by 20
- 2025Finite State Automata Inside Transformers with Chain-of-Thought: A Mechanistic Study on State Trackingcited by 17
- 2024Linking In-context Learning in Transformers to Human Episodic Memorycited by 15
- 2024Sparse Autoencoders Enable Scalable and Reliable Circuit Identification in Language Modelscited by 13
- 2024Position: An Inner Interpretability Framework for AI Inspired by Lessons from Cognitive Neurosciencecited by 11
- 2024You can remove GPT2's LayerNorm by fine-tuningcited by 11
- 2025Refusal Falls off a Cliff: How Safety Alignment Fails in Reasoning?cited by 11
- 2025Towards Understanding the Nature of Attention with Low-Rank Sparse Decompositioncited by 9
- 2025Transformers Don't Need LayerNorm at Inference Time: Scaling LayerNorm Removal to GPT-2 XL and the Implications for Mechanistic Interpretabilitycited by 7
- 2024When Parts Are Greater Than Sums: Individual LLM Components Can Outperform Full Modelscited by 6
- 2026The Story is Not the Science: Execution-Grounded Evaluation of Mechanistic Interpretability Researchcited by 6
- 2024Multilevel Interpretability Of Artificial Neural Networks: Leveraging Framework And Methods From Neurosciencecited by 5
- 2025Why Safeguarded Ships Run Aground? Aligned Large Language Models' Safety Mechanisms Tend to Be Anchored in The Template Regioncited by 5
- 2023Forbidden Facts: An Investigation of Competing Objectives in Llama-2cited by 4
- 2024Interpretability in Action: Exploratory Analysis of VPT, a Minecraft Agentcited by 4
- 2025Correcting Gradient-Based Circuit Localization via Interaction-Aware Backpropagationcited by 4
- 2026Bi-Orthogonal Factor Decomposition for Vision Transformerscited by 4
- 2026Is One Layer Enough? Understanding Inference Dynamics in Tabular Foundation Modelscited by 4
- 2025Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identificationcited by 3
- 2025Task Vectors, Learned Not Extracted: Performance Gains and Mechanistic Insightcited by 3
- 2025Induction Signatures Are Not Enough: A Matched-Compute Study of Load-Bearing Structure in In-Context Learningcited by 2
- 2026Compressed Sensing for Capability Localization in Large Language Modelscited by 2
- 2026How LLMs Are Persuaded: A Few Attention Heads, Reroutedcited by 2
- 2026Mechanistic Tomography: Designed Measurement for Control-Oriented Interpretabilitycited by 2
- 2026Feedback That Backfires: Why Small Language Model Agents Repeat the Call They Just Watched Failcited by 2
50 most cited of 73 All 73 (JSON)
- 2026The Geometry of Logic: Stratification Induces Semantic Structure and Robust Reasoning26 Sep 2026
- 2026ObserverBench: Testing Mechanistic Estimates for Intervention and Control2 Sep 2026
- 2026Feedback That Backfires: Why Small Language Model Agents Repeat the Call They Just Watched Fail24 Aug 2026
- 2026Mechanistic Tomography: Designed Measurement for Control-Oriented Interpretability19 Aug 2026
- 2026Can Graph Learning Learn Circuits?9 Aug 2026
- 2026Logit-Contribution Scoring Identifies Non-Literal Retrieval Heads1 Jul 2026
- 2026Robust Harmful Features Under Jailbreak Attacks: Mechanistic Evidence from Attention Head Specialization in Large Language Models26 Jun 2026
- 2026Necessary, Decodable and Reversible, Yet Not Transferable: A Stress Test for Attention-Head Role Claims6 Jun 2026
- 2026Function-Vector Heads Are Two Populations: Writers and Cancellers in In-Context Learning25 May 2026
- 2026The Readout Shortcut: Positional Number Copying Dominates Arithmetic CoT Readout in Small Language Models20 May 2026
- 2026Correcting Influence: Unboxing LLM Outputs with Orthogonal Latent Spaces12 May 2026
- 2026How LLMs Are Persuaded: A Few Attention Heads, Rerouted10 May 2026
38 more
- 2026Is One Layer Enough? Understanding Inference Dynamics in Tabular Foundation Models7 May 2026
- 2026How a Cooperative-Override Circuit Suppresses Nash Play in Large Language Models29 Apr 2026
- 2026SpectralGuard: Detecting Memory Collapse Attacks in State Space Models12 Mar 2026
- 2026Identifying Crucial Attention Heads for Multilingual Language Models: Retrieval and Retrieval-Transition Heads25 Feb 2026
- 2026The Anxiety of Influence: Bloom Filters in Transformer Attention Heads19 Feb 2026
- 2026Compressed Sensing for Capability Localization in Large Language Models11 Feb 2026
- 2026The Story is Not the Science: Execution-Grounded Evaluation of Mechanistic Interpretability Research5 Feb 2026
- 2026Hierarchical Latent Structures in Data Generation Process Unify Mechanistic Phenomena across Scale4 Feb 2026
- 2026Bi-Orthogonal Factor Decomposition for Vision Transformers8 Jan 2026
- 2025Don't Think of the White Bear: Ironic Negation in Transformer Models Under Cognitive Load15 Nov 2025
- 2025On the Representations of Entities in Auto-regressive Large Language Models10 Oct 2025
- 2025Refusal Falls off a Cliff: How Safety Alignment Fails in Reasoning?7 Oct 2025
- 2025Task Vectors, Learned Not Extracted: Performance Gains and Mechanistic Insight29 Sep 2025
- 2025Induction Signatures Are Not Enough: A Matched-Compute Study of Load-Bearing Structure in In-Context Learning26 Sep 2025
- 2025From Indirect Object Identification to Syllogisms: Exploring Binary Mechanisms in Transformer Circuits22 Aug 2025
- 2025Transformers Don't Need LayerNorm at Inference Time: Scaling LayerNorm Removal to GPT-2 XL and the Implications for Mechanistic Interpretability3 Jul 2025
- 2025Query-Focused Retrieval Heads Improve Long-Context Reasoning and Re-ranking11 Jun 2025
- 2025Time Course MechInterp: Analyzing the Evolution of Components and Knowledge in Large Language Models3 Jun 2025
- 2025Correcting Gradient-Based Circuit Localization via Interaction-Aware Backpropagation23 May 2025
- 2025Do Language Models Use Their Depth Efficiently?20 May 2025
- 2025Towards Understanding the Nature of Attention with Low-Rank Sparse Decomposition29 Apr 2025
- 2025Taming Knowledge Conflicts in Language Models14 Mar 2025
- 2025PolyPythias: Stability and Outliers across Fifty Language Model Pre-Training Runs12 Mar 2025
- 2025Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identification27 Feb 2025
- 2025Promote, Suppress, Iterate: How Language Models Answer One-to-Many Factual Queries27 Feb 2025
- 2025Finite State Automata Inside Transformers with Chain-of-Thought: A Mechanistic Study on State Tracking27 Feb 2025
- 2025Why Safeguarded Ships Run Aground? Aligned Large Language Models' Safety Mechanisms Tend to Be Anchored in The Template Region19 Feb 2025
- 2025Towards Understanding Fine-Tuning Mechanisms of LLMs via Circuit Analysis17 Feb 2025
- 2024ElastiFormer: Learned Redundancy Reduction in Transformer via Self-Distillation22 Nov 2024
- 2024Universal Response and Emergence of Induction in LLMs11 Nov 2024
- 2024Arithmetic Without Algorithms: Language Models Solve Math With a Bag of Heuristics28 Oct 2024
- 2024ReDeEP: Detecting Hallucination in Retrieval-Augmented Generation via Mechanistic Interpretability15 Oct 2024
- 2024The Same But Different: Structural Similarities and Differences in Multilingual Language Modeling11 Oct 2024
- 2024PEAR: Position-Embedding-Agnostic Attention Re-weighting Enhances Retrieval-Augmented Generation with Zero Inference Overhead29 Sep 2024
- 2024Optimal ablation for interpretability16 Sep 2024
- 2024You can remove GPT2's LayerNorm by fine-tuning6 Sep 2024
- 2024Attention Heads of Large Language Models: A Survey5 Sep 2024
- 2024Multilevel Interpretability Of Artificial Neural Networks: Leveraging Framework And Methods From Neuroscience22 Aug 2024
50 newest of 73 All 73 (JSON)
- 2024Arithmetic Without Algorithms: Language Models Solve Math With a Bag of Heuristicscited by 94
- 2025Query-Focused Retrieval Heads Improve Long-Context Reasoning and Re-rankingcited by 30
- 2025Finite State Automata Inside Transformers with Chain-of-Thought: A Mechanistic Study on State Trackingcited by 17
- 2025Refusal Falls off a Cliff: How Safety Alignment Fails in Reasoning?cited by 11
- 2026Compressed Sensing for Capability Localization in Large Language Modelscited by 2
- 2024ElastiFormer: Learned Redundancy Reduction in Transformer via Self-Distillationcited by 1
- 2025Don't Think of the White Bear: Ironic Negation in Transformer Models Under Cognitive Loadcited by 1
- 2026The Readout Shortcut: Positional Number Copying Dominates Arithmetic CoT Readout in Small Language Modelscited by 1
- 2026The Geometry of Logic: Stratification Induces Semantic Structure and Robust Reasoningcited by 0
- 2026The Geometry of Logic: Stratification Induces Semantic Structure and Robust Reasoning26 Sep 2026
- 2026The Readout Shortcut: Positional Number Copying Dominates Arithmetic CoT Readout in Small Language Models20 May 2026
- 2026Compressed Sensing for Capability Localization in Large Language Models11 Feb 2026
- 2025Don't Think of the White Bear: Ironic Negation in Transformer Models Under Cognitive Load15 Nov 2025
- 2025Refusal Falls off a Cliff: How Safety Alignment Fails in Reasoning?7 Oct 2025
- 2025Query-Focused Retrieval Heads Improve Long-Context Reasoning and Re-ranking11 Jun 2025
- 2025Finite State Automata Inside Transformers with Chain-of-Thought: A Mechanistic Study on State Tracking27 Feb 2025
- 2024ElastiFormer: Learned Redundancy Reduction in Transformer via Self-Distillation22 Nov 2024
- 2024Arithmetic Without Algorithms: Language Models Solve Math With a Bag of Heuristics28 Oct 2024
- 2024No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attackscited by 28
- 2025Why Safeguarded Ships Run Aground? Aligned Large Language Models' Safety Mechanisms Tend to Be Anchored in The Template Regioncited by 5
- 2026Robust Harmful Features Under Jailbreak Attacks: Mechanistic Evidence from Attention Head Specialization in Large Language Modelscited by 1
- 2026Robust Harmful Features Under Jailbreak Attacks: Mechanistic Evidence from Attention Head Specialization in Large Language Models26 Jun 2026
- 2025Why Safeguarded Ships Run Aground? Aligned Large Language Models' Safety Mechanisms Tend to Be Anchored in The Template Region19 Feb 2025
- 2024No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attacks25 May 2024
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 415
- 2024How to use and interpret activation patchingcited by 191
- 2024Transcoders Find Interpretable LLM Feature Circuitscited by 186
- 2024Improving Dictionary Learning with Gated Sparse Autoencoderscited by 171
- 2024The Remarkable Robustness of LLMs: Stages of Inference?cited by 138
- 2024A Practical Review of Mechanistic Interpretability for Transformer-Based Language Modelscited by 113
- 2024Are self-explanations from Large Language Models faithful?cited by 101
- 2024Universal Neurons in GPT2 Language Modelscited by 100
- 2024AtP*: An efficient and scalable method for localizing LLM behaviour to componentscited by 100
- 2024A Primer on the Inner Workings of Transformer-based Language Modelscited by 83
- 2023Successor Heads: Recurring, Interpretable Attention Heads In The Wildcited by 77
- 2024Attention Heads of Large Language Models: A Surveycited by 65
12 most cited of 56 All 56 (JSON)
- 2026ObserverBench: Testing Mechanistic Estimates for Intervention and Control2 Sep 2026
- 2026Mechanistic Tomography: Designed Measurement for Control-Oriented Interpretability19 Aug 2026
- 2026Can Graph Learning Learn Circuits?9 Aug 2026
- 2026Logit-Contribution Scoring Identifies Non-Literal Retrieval Heads1 Jul 2026
- 2026Necessary, Decodable and Reversible, Yet Not Transferable: A Stress Test for Attention-Head Role Claims6 Jun 2026
- 2026Function-Vector Heads Are Two Populations: Writers and Cancellers in In-Context Learning25 May 2026
- 2026Correcting Influence: Unboxing LLM Outputs with Orthogonal Latent Spaces12 May 2026
- 2026How LLMs Are Persuaded: A Few Attention Heads, Rerouted10 May 2026
- 2026Is One Layer Enough? Understanding Inference Dynamics in Tabular Foundation Models7 May 2026
- 2026How a Cooperative-Override Circuit Suppresses Nash Play in Large Language Models29 Apr 2026
- 2026Identifying Crucial Attention Heads for Multilingual Language Models: Retrieval and Retrieval-Transition Heads25 Feb 2026
- 2026The Anxiety of Influence: Bloom Filters in Transformer Attention Heads19 Feb 2026
12 newest of 56 All 56 (JSON)