Effectively Controlling Reasoning Models through Thinking Intervention
On the map: LLM reasoning → Test-time compute and efficient thinking
Abstract (arXiv)
Reasoning-enhanced large language models (LLMs) explicitly generate intermediate reasoning steps prior to generating final answers, helping the model excel in complex problem-solving. In this paper, we demonstrate that this emerging generation framework offers a unique opportunity for more fine-grained control over model behavior. We propose Thinking Intervention, a novel paradigm designed to explicitly guide the internal reasoning processes of LLMs by strategically inserting or revising specific thinking tokens. We find that the Thinking Intervention paradigm enhances the capabilities of reasoning models across a wide range of tasks, including instruction following on IFEval and Overthinking, instruction hierarchy on SEP, and safety alignment on XSTest and SorryBench. Our results demonstrate that Thinking Intervention significantly outperforms baseline prompting approaches, achieving up to 6.7% accuracy gains in instruction-following scenarios, 15.4% improvements in reasoning about instruction hierarchies, and a 40.0% increase in refusal rates for unsafe prompts using open-source DeepSeek R1 models. Overall, our work opens a promising new research avenue for controlling reasoning LLMs.
Key facts. Cited by 65 papers in the map (data through 14 Oct 2026). Placed in Test-time compute and efficient thinking, one of 17 directions in LLM reasoning. Builds on 68 of its 82 references that are in the map. First posted on arXiv 31 Mar 2025.
Builds on
68 of 82 references.
Closest ancestors · 6
Same direction, newest first
- 2025Stop Overthinking: A Survey on Efficient Reasoning for Large Language Models20 Mar
- 2025L1: Controlling How Long A Reasoning Model Thinks With Reinforcement Learning6 Mar
- 2025How Well do LLMs Compress Their Own Chain-of-Thought? A Token Complexity Approach3 Mar
- 2025s1: Simple test-time scaling31 Jan
- 2024Token-Budget-Aware LLM Reasoning24 Dec
- 2024Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameters6 Aug
Other references · 62
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,371
- 2023Let's Verify Step by Stepcited by 3,789
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
38 more
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,373
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2020Learning to summarize from human feedbackcited by 2,588
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,234
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2021Multitask Prompted Training Enables Zero-Shot Task Generalizationcited by 1,470
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,302
- 2023Instruction-Following Evaluation for Large Language Modelscited by 1,228
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,122
- 2022Large Language Models Are Human-Level Prompt Engineerscited by 1,045
- 2022Interleaving Retrieval with Chain-of-Thought Reasoning for Knowledge-Intensive Multi-Step Questionscited by 923
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 799
- 2023Measuring Faithfulness in Chain-of-Thought Reasoningcited by 703
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 656
- 2021Prompt Programming for Large Language Models: Beyond the Few-Shot Paradigmcited by 606
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 493
- 2024A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applicationscited by 431
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 384
- 2024StruQ: Defending Against Prompt Injection with Structured Queriescited by 375
- 2022RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learningcited by 366
- 2022Language Models Are Greedy Reasoners: A Systematic Formal Analysis of Chain-of-Thoughtcited by 337
- 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 308
- 2025Chain of Draft: Thinking Faster by Writing Lesscited by 297
- 2023ToRA: A Tool-Integrated Reasoning Agent for Mathematical Problem Solvingcited by 282
- 2024Defending Against Indirect Prompt Injection Attacks With Spotlightingcited by 267
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
- 2025Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teamingcited by 181
- 2023Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritizationcited by 170
- 2025Chain-of-Thought Reasoning In The Wild Is Not Always Faithfulcited by 170
- 2023Inspecting and Editing Knowledge Representations in Language Modelscited by 141
50 most cited of 62 All 62 (JSON)
Built on by
Citing papers per year: 2025: 44; 2026: 21.
65 papers.
Sort:
By area:
- 2025Reasoning Models Can Be Effective Without Thinkingcited by 187
- 2025A Survey of Context Engineering for Large Language Modelscited by 126
- 2025Safety in Large Reasoning Models: A Surveycited by 64
- 2025Learning When to Think: Shaping Adaptive Reasoning in R1-Style Models via Multi-Stage RLcited by 62
- 2025Defending Against Prompt Injection with DataFiltercited by 35
- 2025Defending Against Prompt Injection With a Few DefensiveTokenscited by 33
- 2025Qwen Look Again: Guiding Vision-Language Reasoning Models to Re-attention Visual Informationcited by 28
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkerscited by 28
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Modelscited by 25
- 2025Measuring the Faithfulness of Thinking Drafts in Large Reasoning Modelscited by 23
- 2025Overclocking LLM Reasoning: Monitoring and Controlling Thinking Path Lengths in LLMscited by 22
- 2025Not All Tokens Are What You Need In Thinkingcited by 20
38 more
- 2025MMATH: A Multilingual Benchmark for Mathematical Reasoningcited by 17
- 2025OThink-R1: Intrinsic Fast/Slow Thinking Mode Switching for Over-Reasoning Mitigationcited by 17
- 2025Causal Sufficiency and Necessity Improves Chain-of-Thought Reasoningcited by 17
- 2025Think Clearly: Improving Reasoning via Redundant Token Pruningcited by 17
- 2025Two Experts Are All You Need for Steering Thinking: Reinforcing Cognitive Effort in MoE Reasoning Models Without Additional Trainingcited by 16
- 2025StreamingThinker: Large Language Models Can Think While Readingcited by 15
- 2026Controllable LLM Reasoning via Sparse Autoencoder-Based Steeringcited by 15
- 2025When Models Reason in Your Language: Controlling Thinking Language Comes at the Cost of Accuracycited by 14
- 2025Reasoning Model Unlearning: Forgetting Traces, Not Just Answers, While Preserving Reasoning Skillscited by 14
- 2025MMPB: It's Time for Multi-Modal Personalizationcited by 14
- 2025SABER: Switchable and Balanced Training for Efficient LLM Reasoningcited by 12
- 2025Retrieval-of-Thought: Efficient Reasoning via Reusing Thoughtscited by 12
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Interventioncited by 11
- 2025Investigating CoT Monitorability in Large Reasoning Modelscited by 9
- 2025Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysiscited by 9
- 2025Thinking Sparks!: Emergent Attention Heads in Reasoning Models During Post Trainingcited by 8
- 2025Tree-of-Reasoning: Towards Complex Medical Diagnosis via Multi-Agent Reasoning with Evidence Treecited by 7
- 2025Asynchronous Reasoning: Training-Free Interactive Thinking LLMscited by 7
- 2026What Matters For Safety Alignment?cited by 7
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviourcited by 7
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 7
- 2025Efficient Long CoT Reasoning in Small Language Modelscited by 6
- 2025CARE: Decoding Time Safety Alignment via Rollback and Introspection Interventioncited by 6
- 2026Breaking the Chain: A Causal Analysis of LLM Faithfulness to Intermediate Structurescited by 6
- 2025CyclicReflex: Improving Reasoning Models via Cyclical Reflection Token Schedulingcited by 5
- 2025Think How to Think: Mitigating Overthinking with Autonomous Difficulty Cognition in Large Reasoning Modelscited by 5
- 2025Off-Trajectory Reasoning: Can LLMs Collaborate on Reasoning Trajectory?cited by 5
- 2025ReasoningGuard: Safeguarding Large Reasoning Models with Inference-time Safety Aha Momentscited by 4
- 2025Reasoning over Boundaries: Enhancing Specification Alignment via Test-time Deliberationcited by 4
- 2026On-Policy Supervised Fine-Tuning for Efficient Reasoningcited by 4
- 2026Plans Don't Persist: Why Context Management Is Load Bearing for LLM Agentscited by 4
- 2025Injecting External Knowledge into the Reasoning Process Enhances Retrieval-Augmented Generationcited by 3
- 2025ThinkPilot: Steering Reasoning Models via Automated Think-prefixes Optimizationcited by 3
- 2025Learning to Reason Efficiently with Discounted Reinforcement Learningcited by 3
- 2025K2-V2: A 360-Open, Reasoning-Enhanced LLMcited by 3
- 2025Does More Inference-Time Compute Really Help Robustness?cited by 2
- 2025On the Robustness of Answer Formats in Medical Reasoning Modelscited by 2
- 2025Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Abilitycited by 2
50 most cited of 65 All 65 (JSON)
- 2026Nudgeability: Reasoning Models Follow Confidence Signals Without Tracking Their Own Competence28 Sep 2026
- 2026LLM Post-Training as Brownfield Maintenance: An Industrial Perspective on Dataware Engineering31 Aug 2026
- 2026INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment27 Aug 2026
- 2026Not All Eval-Awareness Is Equal: Capabilities Framing Predicts Compliance27 Aug 2026
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States1 Aug 2026
- 2026Steering Instruction Hierarchies at Inference Time28 Jul 2026
- 2026Plans Don't Persist: Why Context Management Is Load Bearing for LLM Agents22 Jun 2026
- 2026The Periodic Table of LLM Reasoning: A Structured Survey of Reasoning Paradigms, Methods, and Failure Modes9 Jun 2026
- 2026Where Instruction Hierarchy Breaks: Diagnosing and Repairing Failures in Reasoning Language Models5 Jun 2026
- 2026TALAN: Task-Aligned Latent Adaptation Networks for Targeted Post-Training of Large Language Models5 Jun 2026
- 2026Behavior Cue Reasoning: Monitorable Reasoning Improves Efficiency and Safety through Oversight7 May 2026
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviour7 May 2026
38 more
- 2026Selective Forgetting for Large Reasoning Models4 Apr 2026
- 2026Contrastive Reasoning Alignment: Reinforcement Learning from Hidden Representations18 Mar 2026
- 2026Breaking the Chain: A Causal Analysis of LLM Faithfulness to Intermediate Structures17 Mar 2026
- 2026Decoding the Critique Mechanism in Large Reasoning Models17 Mar 2026
- 2026SenTSR-Bench: Thinking with Injected Knowledge for Time-Series Reasoning23 Feb 2026
- 2026On-Policy Supervised Fine-Tuning for Efficient Reasoning13 Feb 2026
- 2026Matrix as Plan: Structured Logical Reasoning with Feedback-Driven Replanning15 Jan 2026
- 2026What Matters For Safety Alignment?7 Jan 2026
- 2026Controllable LLM Reasoning via Sparse Autoencoder-Based Steering7 Jan 2026
- 2025Asynchronous Reasoning: Training-Free Interactive Thinking LLMs11 Dec 2025
- 2025K2-V2: A 360-Open, Reasoning-Enhanced LLM5 Dec 2025
- 2025Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Ability1 Dec 2025
- 2025Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysis30 Nov 2025
- 2025Investigating CoT Monitorability in Large Reasoning Models11 Nov 2025
- 2025Learning to Reason Efficiently with Discounted Reinforcement Learning27 Oct 2025
- 2025Defending Against Prompt Injection with DataFilter22 Oct 2025
- 2025StreamingThinker: Large Language Models Can Think While Reading20 Oct 2025
- 2025ThinkPilot: Steering Reasoning Models via Automated Think-prefixes Optimization14 Oct 2025
- 2025Off-Trajectory Reasoning: Can LLMs Collaborate on Reasoning Trajectory?7 Oct 2025
- 2025Thinking Sparks!: Emergent Attention Heads in Reasoning Models During Post Training30 Sep 2025
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention29 Sep 2025
- 2025MMPB: It's Time for Multi-Modal Personalization26 Sep 2025
- 2025Retrieval-of-Thought: Efficient Reasoning via Reusing Thoughts26 Sep 2025
- 2025On the Robustness of Answer Formats in Medical Reasoning Models25 Sep 2025
- 2025Adaptive Overclocking: Dynamic Control of Thinking Path Length via Real-Time Reasoning Signals21 Sep 2025
- 2025Reasoning over Boundaries: Enhancing Specification Alignment via Test-time Deliberation18 Sep 2025
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models4 Sep 2025
- 2025CARE: Decoding Time Safety Alignment via Rollback and Introspection Intervention1 Sep 2025
- 2025SABER: Switchable and Balanced Training for Efficient LLM Reasoning8 Aug 2025
- 2025ReasoningGuard: Safeguarding Large Reasoning Models with Inference-time Safety Aha Moments6 Aug 2025
- 2025Tree-of-Reasoning: Towards Complex Medical Diagnosis via Multi-Agent Reasoning with Evidence Tree5 Aug 2025
- 2025Injecting External Knowledge into the Reasoning Process Enhances Retrieval-Augmented Generation25 Jul 2025
- 2025Does More Inference-Time Compute Really Help Robustness?21 Jul 2025
- 2025A Survey of Context Engineering for Large Language Models17 Jul 2025
- 2025Defending Against Prompt Injection With a Few DefensiveTokens10 Jul 2025
- 2025Think How to Think: Mitigating Overthinking with Autonomous Difficulty Cognition in Large Reasoning Models3 Jul 2025
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkers18 Jun 2025
- 2025Think Clearly: Improving Reasoning via Redundant Token Pruning17 Jun 2025
50 newest of 65 All 65 (JSON)
- 2025Reasoning Models Can Be Effective Without Thinkingcited by 187
- 2025Safety in Large Reasoning Models: A Surveycited by 64
- 2025Learning When to Think: Shaping Adaptive Reasoning in R1-Style Models via Multi-Stage RLcited by 62
- 2025Qwen Look Again: Guiding Vision-Language Reasoning Models to Re-attention Visual Informationcited by 28
- 2025Leaky Thoughts: Large Reasoning Models Are Not Private Thinkerscited by 28
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Modelscited by 25
- 2025Measuring the Faithfulness of Thinking Drafts in Large Reasoning Modelscited by 23
- 2025Overclocking LLM Reasoning: Monitoring and Controlling Thinking Path Lengths in LLMscited by 22
- 2025Not All Tokens Are What You Need In Thinkingcited by 20
- 2025MMATH: A Multilingual Benchmark for Mathematical Reasoningcited by 17
- 2025OThink-R1: Intrinsic Fast/Slow Thinking Mode Switching for Over-Reasoning Mitigationcited by 17
- 2025Causal Sufficiency and Necessity Improves Chain-of-Thought Reasoningcited by 17
12 most cited of 51 All 51 (JSON)
- 2026Nudgeability: Reasoning Models Follow Confidence Signals Without Tracking Their Own Competence28 Sep 2026
- 2026The Periodic Table of LLM Reasoning: A Structured Survey of Reasoning Paradigms, Methods, and Failure Modes9 Jun 2026
- 2026Where Instruction Hierarchy Breaks: Diagnosing and Repairing Failures in Reasoning Language Models5 Jun 2026
- 2026Behavior Cue Reasoning: Monitorable Reasoning Improves Efficiency and Safety through Oversight7 May 2026
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviour7 May 2026
- 2026Selective Forgetting for Large Reasoning Models4 Apr 2026
- 2026Contrastive Reasoning Alignment: Reinforcement Learning from Hidden Representations18 Mar 2026
- 2026Breaking the Chain: A Causal Analysis of LLM Faithfulness to Intermediate Structures17 Mar 2026
- 2026Decoding the Critique Mechanism in Large Reasoning Models17 Mar 2026
- 2026SenTSR-Bench: Thinking with Injected Knowledge for Time-Series Reasoning23 Feb 2026
- 2026On-Policy Supervised Fine-Tuning for Efficient Reasoning13 Feb 2026
- 2026Matrix as Plan: Structured Logical Reasoning with Feedback-Driven Replanning15 Jan 2026
12 newest of 51 All 51 (JSON)
- 2025Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysiscited by 9
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 7
- 2026Plans Don't Persist: Why Context Management Is Load Bearing for LLM Agentscited by 4
- 2026INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignmentcited by 0
- 2026INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment27 Aug 2026
- 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden States1 Aug 2026
- 2026Plans Don't Persist: Why Context Management Is Load Bearing for LLM Agents22 Jun 2026
- 2025Mitigating Indirect Prompt Injection via Instruction-Following Intent Analysis30 Nov 2025
- 2025Defending Against Prompt Injection with DataFiltercited by 35
- 2025Defending Against Prompt Injection With a Few DefensiveTokenscited by 33
- 2025Defending Against Prompt Injection with DataFilter22 Oct 2025
- 2025Defending Against Prompt Injection With a Few DefensiveTokens10 Jul 2025
- 2025A Survey of Context Engineering for Large Language Modelscited by 126
- 2025MMPB: It's Time for Multi-Modal Personalizationcited by 14
- 2026Steering Instruction Hierarchies at Inference Timecited by 2
- 2026TALAN: Task-Aligned Latent Adaptation Networks for Targeted Post-Training of Large Language Modelscited by 0
- 2026Not All Eval-Awareness Is Equal: Capabilities Framing Predicts Compliancecited by 0
- 2026LLM Post-Training as Brownfield Maintenance: An Industrial Perspective on Dataware Engineeringcited by 0
- 2026LLM Post-Training as Brownfield Maintenance: An Industrial Perspective on Dataware Engineering31 Aug 2026
- 2026Not All Eval-Awareness Is Equal: Capabilities Framing Predicts Compliance27 Aug 2026
- 2026Steering Instruction Hierarchies at Inference Time28 Jul 2026
- 2026TALAN: Task-Aligned Latent Adaptation Networks for Targeted Post-Training of Large Language Models5 Jun 2026
- 2025MMPB: It's Time for Multi-Modal Personalization26 Sep 2025
- 2025A Survey of Context Engineering for Large Language Models17 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2026Beyond Model Scaling: Test-Time Intervention for Efficient Deep Reasoning
- 2025When Thinking Fails: The Pitfalls of Reasoning for Instruction-Following in LLMs
- 2025ReasonIF: Large Reasoning Models Fail to Follow Instructions During Reasoning
- 2025Advancing Reasoning in Large Language Models: Promising Methods and Approaches
- 2025Understanding Reasoning in Thinking Language Models via Steering Vectors
- 2025Thinking About Thinking: Evaluating Reasoning in Post-Trained Language Models
- 2025Attentive Reasoning Queries: A Systematic Method for Optimizing Instruction-Following in Large Language Models
- 2025Scaling Reasoning, Losing Control: Evaluating Instruction Following in Large Reasoning Models