Aligned Probing: Relating Toxic Behavior and Model Internals
Not on the map. Why?
Abstract (arXiv)
We introduce aligned probing, a novel interpretability framework that aligns the behavior of language models (LMs), based on their outputs, and their internal representations (internals). Using this framework, we examine over 20 OLMo, Llama, and Mistral models, bridging behavioral and internal perspectives for toxicity for the first time. Our results show that LMs strongly encode information about the toxicity level of inputs and subsequent outputs, particularly in lower layers. Focusing on how unique LMs differ offers both correlative and causal evidence that they generate less toxic output when strongly encoding information about the input toxicity. We also highlight the heterogeneity of toxicity, as model behavior and internals vary across unique attributes such as Threat. Finally, four case studies analyzing detoxification, multi-prompt evaluations, model quantization, and pre-training dynamics underline the practical impact of aligned probing with further concrete insights. Our findings contribute to a more holistic understanding of LMs, both within and beyond the context of toxicity.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 47 of its 64 references that are in the map. First posted on arXiv 17 Mar 2025.
Builds on
47 of 64 references.
References · 47
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2023Mistral 7Bcited by 3,164
- 2019The Curious Case of Neural Text Degenerationcited by 2,916
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2019BERT Rediscovers the Classical NLP Pipelinecited by 1,059
- 2021Probing Classifiers: Promises, Shortcomings, and Advancescited by 876
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 817
- 2019Designing and Interpreting Probes with Control Taskscited by 640
- 2023Bias and Fairness in Large Language Models: A Surveycited by 639
- 2024OLMo: Accelerating the Science of Language Modelscited by 613
35 more
- 2019BLiMP: The Benchmark of Linguistic Minimal Pairs for Englishcited by 564
- 2019What do you learn from context? Probing for sentence structure in contextualized word representationscited by 438
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 422
- 20242 OLMo 2 Furiouscited by 340
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 310
- 2021Annotators with Attitudes: How Annotator Beliefs And Identities Bias Toxic Language Detectioncited by 264
- 2024Model Merging in LLMs, MLLMs, and Beyond: Methods, Theories, Applications and Opportunitiescited by 254
- 2020Information-Theoretic Probing with Minimum Description Lengthcited by 232
- 2024A Mechanistic Understanding of Alignment Algorithms: A Case Study on DPO and Toxicitycited by 185
- 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 182
- 2020Probing the Probing Paradigm: Does Probing Accuracy Entail Task Relevance?cited by 151
- 2024Aya 23: Open Weight Releases to Further Multilingual Progresscited by 123
- 2017Understanding Abuse: A Typology of Abusive Language Detection Subtaskscited by 116
- 2023The Generative AI Paradox: "What It Can Create, It May Not Understand"cited by 98
- 2023Language Model Behavior: A Comprehensive Surveycited by 92
- 2024Detoxifying Large Language Models via Knowledge Editingcited by 87
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2022Probing for the Usage of Grammatical Numbercited by 59
- 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
- 2019Probing What Different NLP Tasks Teach Machines about Function Word Comprehensioncited by 44
- 2023On the Challenges of Using Black-Box APIs for Toxicity Evaluation in Researchcited by 44
- 2023Prompting is not a substitute for probability measurements in large language modelscited by 44
- 2020On the Interplay Between Fine-tuning and Sentence-level Probing for Linguistic Knowledge in Pre-trained Transformerscited by 39
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
- 2024Preference Tuning For Toxicity Mitigation Generalizes Across Languagescited by 31
- 2024Mechanistic?cited by 25
- 2025We Can't Understand AI Using our Existing Vocabularycited by 25
- 2023Toxic Bias: Perspective API Misreads German as More Toxiccited by 21
- 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 20
- 2024From Insights to Actions: The Impact of Interpretability and Analysis Research on NLPcited by 20
- 2024Subjective textitIsms? On the Danger of Conflating Hate and Offence in Abusive Language Detectioncited by 9
- 2022SocioProbe: What, When, and Where Language Models Learn about Sociodemographicscited by 7
- 2024Dive into the Chasm: Probing the Gap between In- and Cross-Topic Generalizationcited by 6
- 2023Counterfactually Probing Language Identity in Multilingual Modelscited by 2
Built on by
Citing papers per year: 2025: 2; 2026: 3.
5 papers.
- 2025Concept-Level Explainability for Auditing & Steering LLM Responsescited by 6
- 2026Mind the Ambiguity: Aleatoric Uncertainty Quantification in LLMs for Safe Medical Question Answeringcited by 2
- 2026Bye Bye Perspective API: Lessons for Building and Governing Measurement Infrastructurecited by 1
- 2026Instructions Shape Production of Language, not Processingcited by 1
- 2025A Pipeline to Assess Merging Methods via Behavior and Internalscited by 0
- 2026Instructions Shape Production of Language, not Processing11 May 2026
- 2026Bye Bye Perspective API: Lessons for Building and Governing Measurement Infrastructure28 Apr 2026
- 2026Mind the Ambiguity: Aleatoric Uncertainty Quantification in LLMs for Safe Medical Question Answering24 Jan 2026
- 2025A Pipeline to Assess Merging Methods via Behavior and Internals23 Sep 2025
- 2025Concept-Level Explainability for Auditing & Steering LLM Responses12 May 2025
Similar, not cited
Close in wording, no citation either way
- 2026Beyond a Global Norm: Personalizing Toxicity Sensitivity in Language Models Without Retraining
- 2024Realistic Evaluation of Toxicity in Large Language Models
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models
- 2024From One to Many: Expanding the Scope of Toxicity Mitigation in Language Models
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMs
- 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigation
- 2026Measuring and Mitigating Toxicity in Large Language Models: A Comprehensive Replication Study