Compact Proofs of Model Performance via Mechanistic Interpretability
Not on the map. Why?
Abstract (arXiv)
We propose using mechanistic interpretability -- techniques for reverse engineering model weights into human-interpretable algorithms -- to derive and compactly prove formal guarantees on model performance. We prototype this approach by formally proving accuracy lower bounds for a small transformer trained on Max-of-K, validating proof transferability across 151 random seeds and four values of K. We create 102 different computer-assisted proof strategies and assess their length and tightness of bound on each of our models. Using quantitative metrics, we find that shorter proofs seem to require and provide more mechanistic understanding. Moreover, we find that more faithful mechanistic understanding leads to tighter performance bounds. We confirm these connections by qualitatively examining a subset of our proofs. Finally, we identify compounding structureless errors as a key challenge for using mechanistic interpretability to generate compact proofs on model performance.
Key facts. Cited by 17 papers in the map (data through 7 Oct 2026). Builds on 24 of its 48 references that are in the map. First posted on arXiv 17 Jun 2024.
Builds on
24 of 48 references.
References · 24
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2013Intriguing properties of neural networkscited by 5,114
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2022Emergent Abilities of Large Language Modelscited by 2,483
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
- 2022In-context Learning and Induction Headscited by 930
- 2023Progress measures for grokking via mechanistic interpretabilitycited by 822
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2022Transformers learn in-context by gradient descentcited by 714
- 2022What learning algorithm is in-context learning? Investigations with linear modelscited by 671
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
12 more
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
- 2019Uniform convergence may be unable to explain generalization in deep learningcited by 223
- 2023How does GPT-2 compute greater-than?: Interpreting mathematical abilities in a pre-trained language modelcited by 199
- 2024How to use and interpret activation patchingcited by 191
- 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 178
- 2023A Toy Model of Universality: Reverse Engineering How Networks Learn Group Operationscited by 141
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2024How Transformers Learn Causal Structure with Gradient Descentcited by 114
- 2017Maximum Resilience of Artificial Neural Networkscited by 97
- 2024Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systemscited by 94
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 91
- 2022Formalizing the presumption of independencecited by 7
Built on by
Citing papers per year: 2024: 4; 2025: 5; 2026: 8.
17 papers.
Sort:
By area:
- 2024Interpretability as Compression: Reconsidering SAE Explanations of Neural Activations with MDL-SAEscited by 22
- 2024Towards a unified and verified understanding of group-operation networkscited by 9
- 2026The Story is Not the Science: Execution-Grounded Evaluation of Mechanistic Interpretability Researchcited by 6
- 2025Path Channels and Plan Extension Kernels: a Mechanistic Description of Planning in a Sokoban RNNcited by 4
- 2024Modular addition without black-boxes: Compressing explanations of MLPs that compute numerical integrationcited by 3
- 2025Learning the symmetric group: large from smallcited by 3
- 2025Evaluating Explanations: An Explanatory Virtues Framework for Mechanistic Interpretability -- The Strange Science Part I.iicited by 2
- 2025ConceptGuard: Neuro-Symbolic Safety Guardrails via Sparse Interpretable Jailbreak Conceptscited by 2
- 2026Input Pathways Shape Few-Shot, Not Zero-Shot, Binding in Tiny Transformers: A Fully-Enumerable Studycited by 2
- 2026Certified Interventional Fidelity: Anytime-Valid, Adaptive Evaluation of Causal Claims in Mechanistic Interpretabilitycited by 2
- 2025Provably Overwhelming Transformer Models with Designed Inputscited by 1
- 2026Knowing without Acting: The Disentangled Geometry of Safety Mechanisms in Large Language Modelscited by 1
5 more
- 2024Towards a Law of Iterated Expectations for Heuristic Estimatorscited by 0
- 2026Committed SAE-Feature Traces for Audited-Session Substitution Detection in Hosted LLMscited by 0
- 2026Interactions Between Crosscoder Features: A Compact Proofs Perspectivecited by 0
- 2026Can Graph Learning Learn Circuits?cited by 0
- 2026Certified Mechanistic Interpretability: Lifting Single-Input Findings to Bounded Neighbourhoodscited by 0
- 2026Certified Mechanistic Interpretability: Lifting Single-Input Findings to Bounded Neighbourhoods17 Aug 2026
- 2026Can Graph Learning Learn Circuits?9 Aug 2026
- 2026Certified Interventional Fidelity: Anytime-Valid, Adaptive Evaluation of Causal Claims in Mechanistic Interpretability9 Jul 2026
- 2026Input Pathways Shape Few-Shot, Not Zero-Shot, Binding in Tiny Transformers: A Fully-Enumerable Study6 Jul 2026
- 2026Interactions Between Crosscoder Features: A Compact Proofs Perspective8 Jun 2026
- 2026Committed SAE-Feature Traces for Audited-Session Substitution Detection in Hosted LLMs20 Apr 2026
- 2026Knowing without Acting: The Disentangled Geometry of Safety Mechanisms in Large Language Models6 Mar 2026
- 2026The Story is Not the Science: Execution-Grounded Evaluation of Mechanistic Interpretability Research5 Feb 2026
- 2025ConceptGuard: Neuro-Symbolic Safety Guardrails via Sparse Interpretable Jailbreak Concepts22 Aug 2025
- 2025Path Channels and Plan Extension Kernels: a Mechanistic Description of Planning in a Sokoban RNN11 Jun 2025
- 2025Evaluating Explanations: An Explanatory Virtues Framework for Mechanistic Interpretability -- The Strange Science Part I.ii2 May 2025
- 2025Learning the symmetric group: large from small18 Feb 2025
5 more
- 2025Provably Overwhelming Transformer Models with Designed Inputs9 Feb 2025
- 2024Modular addition without black-boxes: Compressing explanations of MLPs that compute numerical integration4 Dec 2024
- 2024Interpretability as Compression: Reconsidering SAE Explanations of Neural Activations with MDL-SAEs15 Oct 2024
- 2024Towards a unified and verified understanding of group-operation networks9 Oct 2024
- 2024Towards a Law of Iterated Expectations for Heuristic Estimators2 Oct 2024
- 2024Interpretability as Compression: Reconsidering SAE Explanations of Neural Activations with MDL-SAEscited by 22
- 2024Towards a unified and verified understanding of group-operation networkscited by 9
- 2026The Story is Not the Science: Execution-Grounded Evaluation of Mechanistic Interpretability Researchcited by 6
- 2025Path Channels and Plan Extension Kernels: a Mechanistic Description of Planning in a Sokoban RNNcited by 4
- 2024Modular addition without black-boxes: Compressing explanations of MLPs that compute numerical integrationcited by 3
- 2025Learning the symmetric group: large from smallcited by 3
- 2025Evaluating Explanations: An Explanatory Virtues Framework for Mechanistic Interpretability -- The Strange Science Part I.iicited by 2
- 2026Input Pathways Shape Few-Shot, Not Zero-Shot, Binding in Tiny Transformers: A Fully-Enumerable Studycited by 2
- 2026Certified Interventional Fidelity: Anytime-Valid, Adaptive Evaluation of Causal Claims in Mechanistic Interpretabilitycited by 2
- 2025Provably Overwhelming Transformer Models with Designed Inputscited by 1
- 2024Towards a Law of Iterated Expectations for Heuristic Estimatorscited by 0
- 2026Committed SAE-Feature Traces for Audited-Session Substitution Detection in Hosted LLMscited by 0
12 most cited of 15 All 15 (JSON)
- 2026Certified Mechanistic Interpretability: Lifting Single-Input Findings to Bounded Neighbourhoods17 Aug 2026
- 2026Can Graph Learning Learn Circuits?9 Aug 2026
- 2026Certified Interventional Fidelity: Anytime-Valid, Adaptive Evaluation of Causal Claims in Mechanistic Interpretability9 Jul 2026
- 2026Input Pathways Shape Few-Shot, Not Zero-Shot, Binding in Tiny Transformers: A Fully-Enumerable Study6 Jul 2026
- 2026Interactions Between Crosscoder Features: A Compact Proofs Perspective8 Jun 2026
- 2026Committed SAE-Feature Traces for Audited-Session Substitution Detection in Hosted LLMs20 Apr 2026
- 2026The Story is Not the Science: Execution-Grounded Evaluation of Mechanistic Interpretability Research5 Feb 2026
- 2025Path Channels and Plan Extension Kernels: a Mechanistic Description of Planning in a Sokoban RNN11 Jun 2025
- 2025Evaluating Explanations: An Explanatory Virtues Framework for Mechanistic Interpretability -- The Strange Science Part I.ii2 May 2025
- 2025Learning the symmetric group: large from small18 Feb 2025
- 2025Provably Overwhelming Transformer Models with Designed Inputs9 Feb 2025
- 2024Modular addition without black-boxes: Compressing explanations of MLPs that compute numerical integration4 Dec 2024
12 newest of 15 All 15 (JSON)