LatentQA: Teaching LLMs to Decode Activations Into Natural Language
Not on the map. Why?
Abstract (arXiv)
Top-down transparency typically analyzes language model activations using probes with scalar or single-token outputs, limiting the range of behaviors that can be captured. To alleviate this issue, we develop a more expressive probe that can directly output natural language, performing LatentQA: the task of answering open-ended questions about activations. A key difficulty in developing such a probe is collecting a dataset mapping activations to natural-language descriptions. In response, we propose an approach for generating a dataset of activations and associated question-answer pairs and develop a fine-tuning method for training a decoder LLM on this dataset. We then validate our decoder's fidelity by assessing its ability to read and control model activations. First, we evaluate the decoder on a number of supervised reading tasks with a known answer, such as uncovering hidden system prompts and relational knowledge extraction, and observe that it outperforms competitive probing baselines. Second, we demonstrate that the decoder is precise enough to steer the target model to exhibit behaviors unseen during training. Finally, we show that LatentQA scales well with increasing dataset and model size.
Key facts. Cited by 49 papers in the map (data through 7 Oct 2026). Builds on 45 of its 59 references that are in the map. First posted on arXiv 11 Dec 2024.
Builds on
45 of 59 references.
References · 45
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023Visual Instruction Tuningcited by 7,792
- 2016Pointer Sentinel Mixture Modelscited by 2,992
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2020Learning to summarize from human feedbackcited by 2,562
- 2015VQA: Visual Question Answeringcited by 2,489
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,359
- 2016Understanding intermediate layers using linear classifier probescited by 1,279
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
33 more
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2022Mass-Editing Memory in a Transformercited by 976
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
- 2021Probing Classifiers: Promises, Shortcomings, and Advancescited by 831
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
- 2023Instruction Tuning with GPT-4cited by 676
- 2023Eliciting Latent Predictions from Transformers with the Tuned Lenscited by 579
- 2021Fast Model Editing at Scalecited by 491
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 441
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
- 2022Language in a Bottle: Language Model Guided Concept Bottlenecks for Interpretable Image Classificationcited by 310
- 2023In-Context Learning Creates Task Vectorscited by 302
- 2023Function Vectors in Large Language Modelscited by 292
- 2021Unsolved Problems in ML Safetycited by 291
- 2023Evaluating Large Language Models at Evaluating Instruction Followingcited by 290
- 2024Patchscopes: A Unifying Framework for Inspecting Hidden Representations of Language Modelscited by 225
- 2013k-Sparse Autoencoderscited by 209
- 2023Linearity of Relation Decoding in Transformer Language Modelscited by 190
- 2023Interpreting CLIP's Image Representation via Text-Based Decompositioncited by 189
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
- 2021Implicit Representations of Meaning in Neural Language Modelscited by 179
- 2023Inspecting and Editing Knowledge Representations in Language Modelscited by 140
- 2024Evaluating Frontier Models for Dangerous Capabilitiescited by 121
- 2023Future Lens: Anticipating Subsequent Tokens from a Single Hidden Statecited by 116
- 2024SelfIE: Self-Interpretation of Large Language Model Embeddingscited by 63
- 2024Designing a Dashboard for Transparency and Control of Conversational AIcited by 43
- 2024Who's asking? User personas and the mechanics of latent misalignmentcited by 40
- 2024Monitoring Latent World States in Language Models with Propositional Probescited by 39
- 2024LIFBench: Evaluating the Instruction Following Performance and Stability of Large Language Models in Long-Context Scenarioscited by 31
- 2023The System Model and the User Model: Exploring AI Dashboard Designcited by 12
Built on by
Citing papers per year: 2025: 13; 2026: 36.
49 papers.
Sort:
By area:
- 2025Activation Oracles: Training and Evaluating LLMs as General-Purpose Activation Explainerscited by 41
- 2025Training Language Models to Explain Their Own Computationscited by 27
- 2025Narrow Finetuning Leaves Clearly Readable Traces in Activation Differencescited by 24
- 2025Investigating task-specific prompts and sparse autoencoders for activation monitoringcited by 13
- 2025Predictive Concept Decoders: Training Scalable End-to-End Interpretability Assistantscited by 10
- 2026Subliminal Steering: Stronger Encoding of Hidden Signalscited by 10
- 2025Learning to Interpret Weight Differences in Language Modelscited by 9
- 2026LatentLens: Revealing Highly Interpretable Visual Tokens in LLMscited by 9
- 2025Do Activation Verbalization Methods Convey Privileged Information?cited by 8
- 2026Learning a Generative Meta-Model of LLM Activationscited by 8
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviorscited by 8
- 2025LARGO: Latent Adversarial Reflection through Gradient Optimization for Jailbreaking LLMscited by 7
37 more
- 2025Rep2Text: Decoding Full Text from a Single LLM Token Representationcited by 7
- 2025Steering Awareness: Detecting Activation Steering from Withincited by 7
- 2026COLD-Steer: Steering Large Language Models via In-Context One-step Learning Dynamicscited by 7
- 2026Steered LLM Activations are Non-Surjectivecited by 7
- 2026From Data to Behavior: Predicting Unintended Model Behaviors Before Trainingcited by 6
- 2025Enhancing Conversational Agents with Theory of Mind: Aligning Beliefs, Desires, and Intentions for Human-Like Interactioncited by 3
- 2026Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervisioncited by 3
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 3
- 2025InverseScope: Scalable Activation Inversion for Interpreting Large Language Modelscited by 2
- 2025ParaScopes: What do Language Models Activations Encode About Future Text?cited by 2
- 2026Split Personality Training: Revealing Latent Knowledge Through Alternate Personalitiescited by 2
- 2026Universal Activation Verbalizer: A Unified Framework for Cross-Model Activation Explanationcited by 2
- 2026Train the Model, Not the Reader: Decodability Supervision for Verifiable Activation Explanationscited by 2
- 2026LLM Layers Immediately Correct Each Othercited by 2
- 2026Language Models Can Explain Visual Features via Steeringcited by 1
- 2026Confidence and Calibration of Activation Oracles for Reliable Interpretation of Language Model Internalscited by 1
- 2026Discovering a Zeta Map Algorithm on Dyck Paths via Mechanistic Interpretabilitycited by 1
- 2026Building Better Activation Oraclescited by 1
- 2026SAEExplainer: Interpreting SAE Features with Activation-Guided Preference Optimizationcited by 1
- 2026Decoding Hidden Deception in Reasoning LLMs: Activation Explainers for Deception Auditingcited by 1
- 2026Retrieval is Enough: Training-Free Interpretability with a Tool-Using Agentcited by 1
- 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deceptioncited by 0
- 2026Learning Self-Interpretation from Interpretability Artifacts: Training Lightweight Adapters on Vector-Label Pairscited by 0
- 2026CoSToM:Causal-oriented Steering for Intrinsic Theory-of-Mind Alignment in Large Language Modelscited by 0
- 2026From Correlation to Cause: A Five-Stage Methodology for Feature Analysis in Transformer Language Modelscited by 0
- 2026PRISM: Recovering Instruction Sets from Language Model Activationscited by 0
- 2026Committed Before Reasoning: Behavioral Reproduction and Preliminary Activation-Level Evidence of Answer Pre-Commitment in an Open-Weight LLMcited by 0
- 2026Probing Latent Colombian Identity Inferences in Qwen2.5-7B with Natural Language Autoencoderscited by 0
- 2026Does Out-of-Sight Equal Out-of-Mind in CoT Monitorability?cited by 0
- 2026SAEVerbalizer: Generating Explanations for Sparse Autoencoder Features via Representation Verbalizationcited by 0
- 2026In-Context Neurofeedback: Can LLMs Control Their Internal Representations through Privileged Access?cited by 0
- 2026When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systemscited by 0
- 2026On Emergent Capabilities and Model Mergingcited by 0
- 2026Understanding Confabulation and Rethinking Reconstruction in Activation Explanationscited by 0
- 2026Faithful Activation Verbalization: Reducing Hallucinations in LLM Representation Interpretationcited by 0
- 2026Selecting The Most Informative Tokens in Natural Language Autoencoderscited by 0
- 2026Doc2LoRA Provides Decodable Representations of Scientific Ideascited by 0
- 2026Doc2LoRA Provides Decodable Representations of Scientific Ideas29 Sep 2026
- 2026Selecting The Most Informative Tokens in Natural Language Autoencoders29 Sep 2026
- 2026Faithful Activation Verbalization: Reducing Hallucinations in LLM Representation Interpretation27 Sep 2026
- 2026Understanding Confabulation and Rethinking Reconstruction in Activation Explanations27 Sep 2026
- 2026On Emergent Capabilities and Model Merging21 Sep 2026
- 2026When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems20 Sep 2026
- 2026LLM Layers Immediately Correct Each Other7 Sep 2026
- 2026In-Context Neurofeedback: Can LLMs Control Their Internal Representations through Privileged Access?1 Sep 2026
- 2026SAEVerbalizer: Generating Explanations for Sparse Autoencoder Features via Representation Verbalization13 Aug 2026
- 2026Does Out-of-Sight Equal Out-of-Mind in CoT Monitorability?5 Aug 2026
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States1 Aug 2026
- 2026Probing Latent Colombian Identity Inferences in Qwen2.5-7B with Natural Language Autoencoders23 Jul 2026
37 more
- 2026Train the Model, Not the Reader: Decodability Supervision for Verifiable Activation Explanations22 Jul 2026
- 2026Committed Before Reasoning: Behavioral Reproduction and Preliminary Activation-Level Evidence of Answer Pre-Commitment in an Open-Weight LLM17 Jul 2026
- 2026Retrieval is Enough: Training-Free Interpretability with a Tool-Using Agent17 Jul 2026
- 2026Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervision30 Jun 2026
- 2026Decoding Hidden Deception in Reasoning LLMs: Activation Explainers for Deception Auditing16 Jun 2026
- 2026PRISM: Recovering Instruction Sets from Language Model Activations8 Jun 2026
- 2026SAEExplainer: Interpreting SAE Features with Activation-Guided Preference Optimization7 Jun 2026
- 2026Discovering a Zeta Map Algorithm on Dyck Paths via Mechanistic Interpretability28 May 2026
- 2026Confidence and Calibration of Activation Oracles for Reliable Interpretation of Language Model Internals25 May 2026
- 2026Universal Activation Verbalizer: A Unified Framework for Cross-Model Activation Explanation25 May 2026
- 2026Building Better Activation Oracles23 May 2026
- 2026From Correlation to Cause: A Five-Stage Methodology for Feature Analysis in Transformer Language Models21 May 2026
- 2026Subliminal Steering: Stronger Encoding of Hidden Signals28 Apr 2026
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviors18 Apr 2026
- 2026CoSToM:Causal-oriented Steering for Intrinsic Theory-of-Mind Alignment in Large Language Models11 Apr 2026
- 2026Steered LLM Activations are Non-Surjective10 Apr 2026
- 2026Language Models Can Explain Visual Features via Steering23 Mar 2026
- 2026COLD-Steer: Steering Large Language Models via In-Context One-step Learning Dynamics6 Mar 2026
- 2026Learning Self-Interpretation from Interpretability Artifacts: Training Lightweight Adapters on Vector-Label Pairs10 Feb 2026
- 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deception9 Feb 2026
- 2026Learning a Generative Meta-Model of LLM Activations6 Feb 2026
- 2026Split Personality Training: Revealing Latent Knowledge Through Alternate Personalities5 Feb 2026
- 2026From Data to Behavior: Predicting Unintended Model Behaviors Before Training4 Feb 2026
- 2026LatentLens: Revealing Highly Interpretable Visual Tokens in LLMs31 Jan 2026
- 2025Predictive Concept Decoders: Training Scalable End-to-End Interpretability Assistants17 Dec 2025
- 2025Activation Oracles: Training and Evaluating LLMs as General-Purpose Activation Explainers17 Dec 2025
- 2025Steering Awareness: Detecting Activation Steering from Within26 Nov 2025
- 2025Training Language Models to Explain Their Own Computations11 Nov 2025
- 2025Rep2Text: Decoding Full Text from a Single LLM Token Representation9 Nov 2025
- 2025ParaScopes: What do Language Models Activations Encode About Future Text?31 Oct 2025
- 2025Narrow Finetuning Leaves Clearly Readable Traces in Activation Differences14 Oct 2025
- 2025Learning to Interpret Weight Differences in Language Models6 Oct 2025
- 2025Do Activation Verbalization Methods Convey Privileged Information?16 Sep 2025
- 2025InverseScope: Scalable Activation Inversion for Interpreting Large Language Models9 Jun 2025
- 2025LARGO: Latent Adversarial Reflection through Gradient Optimization for Jailbreaking LLMs16 May 2025
- 2025Investigating task-specific prompts and sparse autoencoders for activation monitoring28 Apr 2025
- 2025Enhancing Conversational Agents with Theory of Mind: Aligning Beliefs, Desires, and Intentions for Human-Like Interaction20 Feb 2025
- 2025Enhancing Conversational Agents with Theory of Mind: Aligning Beliefs, Desires, and Intentions for Human-Like Interactioncited by 3
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 3
- 2026Retrieval is Enough: Training-Free Interpretability with a Tool-Using Agentcited by 1
- 2026When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systemscited by 0
- 2026When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systems20 Sep 2026
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States1 Aug 2026
- 2026Retrieval is Enough: Training-Free Interpretability with a Tool-Using Agent17 Jul 2026
- 2025Enhancing Conversational Agents with Theory of Mind: Aligning Beliefs, Desires, and Intentions for Human-Like Interaction20 Feb 2025
- 2025Activation Oracles: Training and Evaluating LLMs as General-Purpose Activation Explainerscited by 41
- 2025Training Language Models to Explain Their Own Computationscited by 27
- 2025Narrow Finetuning Leaves Clearly Readable Traces in Activation Differencescited by 24
- 2025Investigating task-specific prompts and sparse autoencoders for activation monitoringcited by 13
- 2025Predictive Concept Decoders: Training Scalable End-to-End Interpretability Assistantscited by 10
- 2026Subliminal Steering: Stronger Encoding of Hidden Signalscited by 10
- 2025Learning to Interpret Weight Differences in Language Modelscited by 9
- 2025Do Activation Verbalization Methods Convey Privileged Information?cited by 8
- 2026Learning a Generative Meta-Model of LLM Activationscited by 8
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviorscited by 8
- 2025Rep2Text: Decoding Full Text from a Single LLM Token Representationcited by 7
- 2025Steering Awareness: Detecting Activation Steering from Withincited by 7
12 most cited of 38 All 38 (JSON)
- 2026Doc2LoRA Provides Decodable Representations of Scientific Ideas29 Sep 2026
- 2026Selecting The Most Informative Tokens in Natural Language Autoencoders29 Sep 2026
- 2026Understanding Confabulation and Rethinking Reconstruction in Activation Explanations27 Sep 2026
- 2026On Emergent Capabilities and Model Merging21 Sep 2026
- 2026LLM Layers Immediately Correct Each Other7 Sep 2026
- 2026In-Context Neurofeedback: Can LLMs Control Their Internal Representations through Privileged Access?1 Sep 2026
- 2026SAEVerbalizer: Generating Explanations for Sparse Autoencoder Features via Representation Verbalization13 Aug 2026
- 2026Probing Latent Colombian Identity Inferences in Qwen2.5-7B with Natural Language Autoencoders23 Jul 2026
- 2026Train the Model, Not the Reader: Decodability Supervision for Verifiable Activation Explanations22 Jul 2026
- 2026Committed Before Reasoning: Behavioral Reproduction and Preliminary Activation-Level Evidence of Answer Pre-Commitment in an Open-Weight LLM17 Jul 2026
- 2026Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervision30 Jun 2026
- 2026PRISM: Recovering Instruction Sets from Language Model Activations8 Jun 2026
12 newest of 38 All 38 (JSON)