mlsanityData to 14 Oct 2026

Aligned Probing: Relating Toxic Behavior and Model Internals

arXiv 2503.13390 ↗First posted 17 Mar 2025cs.CLcited by 5

Not on the map. Why?

Abstract (arXiv)

We introduce aligned probing, a novel interpretability framework that aligns the behavior of language models (LMs), based on their outputs, and their internal representations (internals). Using this framework, we examine over 20 OLMo, Llama, and Mistral models, bridging behavioral and internal perspectives for toxicity for the first time. Our results show that LMs strongly encode information about the toxicity level of inputs and subsequent outputs, particularly in lower layers. Focusing on how unique LMs differ offers both correlative and causal evidence that they generate less toxic output when strongly encoding information about the input toxicity. We also highlight the heterogeneity of toxicity, as model behavior and internals vary across unique attributes such as Threat. Finally, four case studies analyzing detoxification, multi-prompt evaluations, model quantization, and pre-training dynamics underline the practical impact of aligned probing with further concrete insights. Our findings contribute to a more holistic understanding of LMs, both within and beyond the context of toxicity.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 47 of its 64 references that are in the map. First posted on arXiv 17 Mar 2025.

Builds on

47 of 64 references.

References · 47

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  3. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  4. 2023Mistral 7Bcited by 3,164
  5. 2019The Curious Case of Neural Text Degenerationcited by 2,916
  6. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
  7. 2019BERT Rediscovers the Classical NLP Pipelinecited by 1,059
  8. 2021Probing Classifiers: Promises, Shortcomings, and Advancescited by 876
  9. 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 817
  10. 2019Designing and Interpreting Probes with Control Taskscited by 640
  11. 2023Bias and Fairness in Large Language Models: A Surveycited by 639
  12. 2024OLMo: Accelerating the Science of Language Modelscited by 613
35 more
  1. 2019BLiMP: The Benchmark of Linguistic Minimal Pairs for Englishcited by 564
  2. 2019What do you learn from context? Probing for sentence structure in contextualized word representationscited by 438
  3. 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
  4. 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 422
  5. 20242 OLMo 2 Furiouscited by 340
  6. 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 310
  7. 2021Annotators with Attitudes: How Annotator Beliefs And Identities Bias Toxic Language Detectioncited by 264
  8. 2024Model Merging in LLMs, MLLMs, and Beyond: Methods, Theories, Applications and Opportunitiescited by 254
  9. 2020Information-Theoretic Probing with Minimum Description Lengthcited by 232
  10. 2024A Mechanistic Understanding of Alignment Algorithms: A Case Study on DPO and Toxicitycited by 185
  11. 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 182
  12. 2020Probing the Probing Paradigm: Does Probing Accuracy Entail Task Relevance?cited by 151
  13. 2024Aya 23: Open Weight Releases to Further Multilingual Progresscited by 123
  14. 2017Understanding Abuse: A Typology of Abusive Language Detection Subtaskscited by 116
  15. 2023The Generative AI Paradox: "What It Can Create, It May Not Understand"cited by 98
  16. 2023Language Model Behavior: A Comprehensive Surveycited by 92
  17. 2024Detoxifying Large Language Models via Knowledge Editingcited by 87
  18. 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
  19. 2022Probing for the Usage of Grammatical Numbercited by 59
  20. 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
  21. 2019Probing What Different NLP Tasks Teach Machines about Function Word Comprehensioncited by 44
  22. 2023On the Challenges of Using Black-Box APIs for Toxicity Evaluation in Researchcited by 44
  23. 2023Prompting is not a substitute for probability measurements in large language modelscited by 44
  24. 2020On the Interplay Between Fine-tuning and Sentence-level Probing for Linguistic Knowledge in Pre-trained Transformerscited by 39
  25. 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
  26. 2024Preference Tuning For Toxicity Mitigation Generalizes Across Languagescited by 31
  27. 2024Mechanistic?cited by 25
  28. 2025We Can't Understand AI Using our Existing Vocabularycited by 25
  29. 2023Toxic Bias: Perspective API Misreads German as More Toxiccited by 21
  30. 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 20
  31. 2024From Insights to Actions: The Impact of Interpretability and Analysis Research on NLPcited by 20
  32. 2024Subjective textitIsms? On the Danger of Conflating Hate and Offence in Abusive Language Detectioncited by 9
  33. 2022SocioProbe: What, When, and Where Language Models Learn about Sociodemographicscited by 7
  34. 2024Dive into the Chasm: Probing the Gap between In- and Cross-Topic Generalizationcited by 6
  35. 2023Counterfactually Probing Language Identity in Multilingual Modelscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 3.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Beyond a Global Norm: Personalizing Toxicity Sensitivity in Language Models Without Retraining
  2. 2024Realistic Evaluation of Toxicity in Large Language Models
  3. 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models
  4. 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models
  5. 2024From One to Many: Expanding the Scope of Toxicity Mitigation in Language Models
  6. 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMs
  7. 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigation
  8. 2026Measuring and Mitigating Toxicity in Large Language Models: A Comprehensive Replication Study