Mechanistic Anomaly Detection for "Quirky" Language Models
Not on the map. Why?
Abstract (arXiv)
As LLMs grow in capability, the task of supervising LLMs becomes more challenging. Supervision failures can occur if LLMs are sensitive to factors that supervisors are unaware of. We investigate Mechanistic Anomaly Detection (MAD) as a technique to augment supervision of capable models; we use internal model features to identify anomalous training signals so they can be investigated or discarded. We train detectors to flag points from the test environment that differ substantially from the training environment, and experiment with a large variety of detector features and scoring rules to detect anomalies in a set of ``quirky'' language models. We find that detectors can achieve high discrimination on some tasks, but no detector is effective across all models and tasks. MAD techniques may be effective in low-stakes applications, but advances in both detection and evaluation are likely needed if they are to be used in high stakes settings.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 14 of its 23 references that are in the map. First posted on arXiv 9 Apr 2025.
Builds on
14 of 23 references.
References · 14
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2015Variational Inference with Normalizing Flowscited by 2,170
- 2024Scaling and evaluating sparse autoencoderscited by 553
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 467
- 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 459
- 2023Generating with Confidence: Uncertainty Quantification for Black-box Large Language Modelscited by 293
- 2021SPECTRE: Defending Against Backdoor Attacks Using Robust Statisticscited by 130
- 2024Sycophancy in Large Language Models: Causes and Mitigationscited by 101
- 2023Eliciting Latent Knowledge from Quirky Language Modelscited by 62
- 2023ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigmscited by 29
- 2023Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrationscited by 21
- 2024Mitigating Backdoor Threats to Large Language Models: Advancement and Challengescited by 15
2 more
- 2019Deep Probabilistic Models to Detect Data Poisoning Attackscited by 10
- 2023Benchmarks for Detecting Measurement Tamperingcited by 6
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2026Quantifying Subliminal Behavioral Transfer Ratios in Language Model Distillationcited by 3
- 2026MANATEE: Inference-Time Lightweight Diffusion Based Safety Defense for LLMscited by 2
- 2025Sparse, self-organizing ensembles of local kernels detect rare statistical anomaliescited by 1
- 2026Interactions Between Crosscoder Features: A Compact Proofs Perspectivecited by 0
- 2026AI Models Can Provably Hide Arbitrary Capabilitiescited by 0
- 2026AI Models Can Provably Hide Arbitrary Capabilities9 Oct 2026
- 2026Quantifying Subliminal Behavioral Transfer Ratios in Language Model Distillation9 Jun 2026
- 2026Interactions Between Crosscoder Features: A Compact Proofs Perspective8 Jun 2026
- 2026MANATEE: Inference-Time Lightweight Diffusion Based Safety Defense for LLMs21 Feb 2026
- 2025Sparse, self-organizing ensembles of local kernels detect rare statistical anomalies5 Nov 2025