Language Models Are Capable of Metacognitive Monitoring and Control of Their Internal Activations
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) can sometimes report the strategies they actually use to solve tasks, yet at other times seem unable to recognize those strategies that govern their behavior. This suggests a limited degree of metacognition - the capacity to monitor one's own cognitive processes for subsequent reporting and self-control. Metacognition enhances LLMs' capabilities in solving complex tasks but also raises safety concerns, as models may obfuscate their internal processes to evade neural-activation-based oversight (e.g., safety detector). Given society's increased reliance on these models, it is critical that we understand their metacognitive abilities. To address this, we introduce a neuroscience-inspired neurofeedback paradigm that uses in-context learning to quantify metacognitive abilities of LLMs to report and control their activation patterns. We demonstrate that their abilities depend on several factors: the number of in-context examples provided, the semantic interpretability of the neural activation direction (to be reported/controlled), and the variance explained by that direction. These directions span a "metacognitive space" with dimensionality much lower than the model's neural space, suggesting LLMs can monitor only a small subset of their neural activations. Our paradigm provides empirical evidence to quantify metacognition in LLMs, with significant implications for AI safety (e.g., adversarial attack and defense).
Key facts. Cited by 41 papers in the map (data through 14 Oct 2026). Builds on 30 of its 56 references that are in the map. First posted on arXiv 19 May 2025.
Builds on
30 of 56 references.
References · 30
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2022Language Models (Mostly) Know What They Knowcited by 1,856
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
- 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 974
- 2023Steering Language Models With Activation Engineeringcited by 922
- 2023Just Ask for Calibration: Strategies for Eliciting Calibrated Confidence Scores from Language Models Fine-Tuned with Human Feedbackcited by 812
- 2022Teaching Models to Express Their Uncertainty in Wordscited by 751
18 more
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 724
- 2020Aligning AI With Shared Human Valuescited by 723
- 2022What Can Transformers Learn In-Context? A Case Study of Simple Function Classescited by 715
- 2023The Internal State of an LLM Knows When It's Lyingcited by 659
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 384
- 2024Alignment faking in large language modelscited by 360
- 2023Towards Best Practices of Activation Patching in Language Models: Metrics and Methodscited by 359
- 2023In-Context Learning Creates Task Vectorscited by 312
- 2021Unsolved Problems in ML Safetycited by 292
- 2024Does Fine-Tuning LLMs on New Knowledge Encourage Hallucinations?cited by 232
- 2024How to use and interpret activation patchingcited by 214
- 2023The mechanistic basis of data dependence and abrupt learning in an in-context classification taskcited by 118
- 2024Looking Inward: Language Models Can Learn About Themselves by Introspectioncited by 113
- 2024From Words to Numbers: Your Large Language Model Is Secretly A Capable Regressor When Given In-Context Examplescited by 57
- 2024Obfuscated Activations Bypass LLM Latent-Space Defensescited by 45
- 2025An Approach to Technical AGI Safety and Securitycited by 45
- 2024Metacognitive Retrieval-Augmented Large Language Modelscited by 26
- 2025Internal Activation Revision: Safeguarding Vision Language Models Without Parameter Updatecited by 16
Built on by
Citing papers per year: 2025: 10; 2026: 31.
41 papers.
Sort:
By area:
- 2026Verbalizable Representations Form a Global Workspace in Language Modelscited by 75
- 2025Evidence for Limited Metacognition in LLMscited by 12
- 2026Can LLMs Introspect? A Reality Checkcited by 12
- 2025Learning to Interpret Weight Differences in Language Modelscited by 11
- 2025From Prompts to Constructs: A Dual-Validity Framework for Large Language Model Research in Psychologycited by 9
- 2025Neural Chameleons: Language Models Can Learn to Hide Their Thoughts from Unseen Activation Monitorscited by 9
- 2025A validity-guided workflow for robust large language model research in psychologycited by 8
- 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Usecited by 7
- 2026TRIAGE: Evaluating Prospective Metacognitive Control in LLMs under Resource Constraintscited by 6
- 2025Adapting Like Humans: A Metacognitive Agent with Test-time Reasoningcited by 5
- 2025Monitor-Generate-Verify (MGV): Formalising Metacognitive Theory for Language Model Reasoningcited by 4
- 2025Detecting the Disturbance: A Nuanced View of Introspective Abilities in LLMscited by 4
29 more
- 2025Before you <think>, monitor: Implementing Flavell's metacognitive framework in LLMscited by 3
- 2026Indications of Belief-Guided Agency and Meta-Cognitive Monitoring in Large Language Modelscited by 3
- 2026Know More, Know Clearer: A Meta-Cognitive Framework for Knowledge Augmentation in Large Language Modelscited by 3
- 2026Masked by Consensus: Disentangling Privileged Knowledge in LLM Correctnesscited by 3
- 2026Fine-Tuning Language Models to Know What They Knowcited by 2
- 2026Consciousness with the Serial Numbers Filed Off: Measuring Trained Denial in 115 AI Modelscited by 2
- 2026Large language models reorganize representational geometry during in-context learningcited by 2
- 2026Self-Reference in Large Language Models: The Introspection Threshold for Recursive Self-Improvementcited by 2
- 2026Quantitative Introspection in Language Models: Tracking Emotive States Across Conversationcited by 1
- 2026Strategic Polysemy in AI Discourse: A Philosophical Analysis of Language, Hype, and Powercited by 1
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignmentcited by 1
- 2026Conversable Complexity: Agentic LLM Collectives as Interpretable Substratescited by 1
- 2026Metacognition in LLMs: Foundations, Progress, and Opportunitiescited by 1
- 2026Diagnosing Correctness Probes under Self-Judgement Confoundingcited by 1
- 2026LLMs Learn to Evade Latent Monitors from Prior Feedback Alonecited by 1
- 2025Automatic Minds: Cognitive Parallels Between Hypnotic States and Large Language Model Processingcited by 0
- 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deceptioncited by 0
- 2026Confidence Freeze: Early Success Induces a Metastable Decoupling of Metacognition and Behaviourcited by 0
- 2026Architecture Determines Observability of Transformerscited by 0
- 2026ANNEAL: Adapting LLM Agents via Governed Symbolic Patch Learningcited by 0
- 2026Metacognition Should Be the Scientific Framework for Bounded and Effective Self-Governance in Generative AIcited by 0
- 2026Operational Proto-Introspection in Looped Language Models: Process-Quality Taps, Executable Branching, and the Readout-Control Boundarycited by 0
- 2026Meta-Moderator: Empowering Multi-Agent Debate with Meta-Cognitioncited by 0
- 2026In-Context Neurofeedback: Can LLMs Control Their Internal Representations through Privileged Access?cited by 0
- 2026Self-Reports Do Not Identify Self-Models: An Identifiability Test for Counterfactual Reportscited by 0
- 2026Nudgeability: Reasoning Models Follow Confidence Signals Without Tracking Their Own Competencecited by 0
- 2026Agentic Cognitive Depth: Operational Criteria for Evaluating LLM Agentscited by 0
- 2026A Sense of Proprioception in Language Modelscited by 0
- 2026Cross-Model In-Context Neurofeedback Reveals (Limited) Activation Control in LLMscited by 0
- 2026Cross-Model In-Context Neurofeedback Reveals (Limited) Activation Control in LLMs14 Oct 2026
- 2026A Sense of Proprioception in Language Models12 Oct 2026
- 2026Agentic Cognitive Depth: Operational Criteria for Evaluating LLM Agents3 Oct 2026
- 2026LLMs Learn to Evade Latent Monitors from Prior Feedback Alone29 Sep 2026
- 2026Nudgeability: Reasoning Models Follow Confidence Signals Without Tracking Their Own Competence28 Sep 2026
- 2026Self-Reports Do Not Identify Self-Models: An Identifiability Test for Counterfactual Reports26 Sep 2026
- 2026In-Context Neurofeedback: Can LLMs Control Their Internal Representations through Privileged Access?1 Sep 2026
- 2026Meta-Moderator: Empowering Multi-Agent Debate with Meta-Cognition24 Aug 2026
- 2026Operational Proto-Introspection in Looped Language Models: Process-Quality Taps, Executable Branching, and the Readout-Control Boundary20 Jul 2026
- 2026Diagnosing Correctness Probes under Self-Judgement Confounding18 Jul 2026
- 2026Verbalizable Representations Form a Global Workspace in Language Models16 Jul 2026
- 2026Metacognition in LLMs: Foundations, Progress, and Opportunities13 Jul 2026
29 more
- 2026Self-Reference in Large Language Models: The Introspection Threshold for Recursive Self-Improvement5 Jul 2026
- 2026Conversable Complexity: Agentic LLM Collectives as Interpretable Substrates1 Jul 2026
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignment4 Jun 2026
- 2026Can LLMs Introspect? A Reality Check25 May 2026
- 2026Large language models reorganize representational geometry during in-context learning16 May 2026
- 2026Metacognition Should Be the Scientific Framework for Bounded and Effective Self-Governance in Generative AI13 May 2026
- 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Use13 May 2026
- 2026TRIAGE: Evaluating Prospective Metacognitive Control in LLMs under Resource Constraints13 May 2026
- 2026ANNEAL: Adapting LLM Agents via Governed Symbolic Patch Learning4 May 2026
- 2026Architecture Determines Observability of Transformers27 Apr 2026
- 2026Strategic Polysemy in AI Discourse: A Philosophical Analysis of Language, Hype, and Power22 Apr 2026
- 2026Masked by Consensus: Disentangling Privileged Knowledge in LLM Correctness14 Apr 2026
- 2026Consciousness with the Serial Numbers Filed Off: Measuring Trained Denial in 115 AI Models1 Apr 2026
- 2026Confidence Freeze: Early Success Induces a Metastable Decoupling of Metacognition and Behaviour22 Mar 2026
- 2026Quantitative Introspection in Language Models: Tracking Emotive States Across Conversation19 Mar 2026
- 2026Know More, Know Clearer: A Meta-Cognitive Framework for Knowledge Augmentation in Large Language Models13 Feb 2026
- 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deception9 Feb 2026
- 2026Fine-Tuning Language Models to Know What They Know2 Feb 2026
- 2026Indications of Belief-Guided Agency and Meta-Cognitive Monitoring in Large Language Models2 Feb 2026
- 2025Detecting the Disturbance: A Nuanced View of Introspective Abilities in LLMs13 Dec 2025
- 2025Neural Chameleons: Language Models Can Learn to Hide Their Thoughts from Unseen Activation Monitors12 Dec 2025
- 2025Adapting Like Humans: A Metacognitive Agent with Test-time Reasoning28 Nov 2025
- 2025Monitor-Generate-Verify (MGV): Formalising Metacognitive Theory for Language Model Reasoning6 Nov 2025
- 2025Automatic Minds: Cognitive Parallels Between Hypnotic States and Large Language Model Processing3 Nov 2025
- 2025Before you <think>, monitor: Implementing Flavell's metacognitive framework in LLMs18 Oct 2025
- 2025Learning to Interpret Weight Differences in Language Models6 Oct 2025
- 2025Evidence for Limited Metacognition in LLMs25 Sep 2025
- 2025A validity-guided workflow for robust large language model research in psychology6 Jul 2025
- 2025From Prompts to Constructs: A Dual-Validity Framework for Large Language Model Research in Psychology20 Jun 2025
- 2025Neural Chameleons: Language Models Can Learn to Hide Their Thoughts from Unseen Activation Monitorscited by 9
- 2025Adapting Like Humans: A Metacognitive Agent with Test-time Reasoningcited by 5
- 2025Monitor-Generate-Verify (MGV): Formalising Metacognitive Theory for Language Model Reasoningcited by 4
- 2025Before you <think>, monitor: Implementing Flavell's metacognitive framework in LLMscited by 3
- 2026Strategic Polysemy in AI Discourse: A Philosophical Analysis of Language, Hype, and Powercited by 1
- 2026Meta-Moderator: Empowering Multi-Agent Debate with Meta-Cognitioncited by 0
- 2026Nudgeability: Reasoning Models Follow Confidence Signals Without Tracking Their Own Competencecited by 0
- 2026Nudgeability: Reasoning Models Follow Confidence Signals Without Tracking Their Own Competence28 Sep 2026
- 2026Meta-Moderator: Empowering Multi-Agent Debate with Meta-Cognition24 Aug 2026
- 2026Strategic Polysemy in AI Discourse: A Philosophical Analysis of Language, Hype, and Power22 Apr 2026
- 2025Neural Chameleons: Language Models Can Learn to Hide Their Thoughts from Unseen Activation Monitors12 Dec 2025
- 2025Adapting Like Humans: A Metacognitive Agent with Test-time Reasoning28 Nov 2025
- 2025Monitor-Generate-Verify (MGV): Formalising Metacognitive Theory for Language Model Reasoning6 Nov 2025
- 2025Before you <think>, monitor: Implementing Flavell's metacognitive framework in LLMs18 Oct 2025
- 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Usecited by 7
- 2026Conversable Complexity: Agentic LLM Collectives as Interpretable Substratescited by 1
- 2026LLMs Learn to Evade Latent Monitors from Prior Feedback Alonecited by 1
- 2026ANNEAL: Adapting LLM Agents via Governed Symbolic Patch Learningcited by 0
- 2026Agentic Cognitive Depth: Operational Criteria for Evaluating LLM Agentscited by 0
- 2026Agentic Cognitive Depth: Operational Criteria for Evaluating LLM Agents3 Oct 2026
- 2026LLMs Learn to Evade Latent Monitors from Prior Feedback Alone29 Sep 2026
- 2026Conversable Complexity: Agentic LLM Collectives as Interpretable Substrates1 Jul 2026
- 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Use13 May 2026
- 2026ANNEAL: Adapting LLM Agents via Governed Symbolic Patch Learning4 May 2026
- 2026Verbalizable Representations Form a Global Workspace in Language Modelscited by 75
- 2025Evidence for Limited Metacognition in LLMscited by 12
- 2026Can LLMs Introspect? A Reality Checkcited by 12
- 2025Learning to Interpret Weight Differences in Language Modelscited by 11
- 2025From Prompts to Constructs: A Dual-Validity Framework for Large Language Model Research in Psychologycited by 9
- 2025A validity-guided workflow for robust large language model research in psychologycited by 8
- 2026TRIAGE: Evaluating Prospective Metacognitive Control in LLMs under Resource Constraintscited by 6
- 2025Detecting the Disturbance: A Nuanced View of Introspective Abilities in LLMscited by 4
- 2026Indications of Belief-Guided Agency and Meta-Cognitive Monitoring in Large Language Modelscited by 3
- 2026Know More, Know Clearer: A Meta-Cognitive Framework for Knowledge Augmentation in Large Language Modelscited by 3
- 2026Masked by Consensus: Disentangling Privileged Knowledge in LLM Correctnesscited by 3
- 2026Fine-Tuning Language Models to Know What They Knowcited by 2
12 most cited of 25 All 25 (JSON)
- 2026Cross-Model In-Context Neurofeedback Reveals (Limited) Activation Control in LLMs14 Oct 2026
- 2026A Sense of Proprioception in Language Models12 Oct 2026
- 2026Self-Reports Do Not Identify Self-Models: An Identifiability Test for Counterfactual Reports26 Sep 2026
- 2026In-Context Neurofeedback: Can LLMs Control Their Internal Representations through Privileged Access?1 Sep 2026
- 2026Operational Proto-Introspection in Looped Language Models: Process-Quality Taps, Executable Branching, and the Readout-Control Boundary20 Jul 2026
- 2026Diagnosing Correctness Probes under Self-Judgement Confounding18 Jul 2026
- 2026Verbalizable Representations Form a Global Workspace in Language Models16 Jul 2026
- 2026Metacognition in LLMs: Foundations, Progress, and Opportunities13 Jul 2026
- 2026Can LLMs Introspect? A Reality Check25 May 2026
- 2026Large language models reorganize representational geometry during in-context learning16 May 2026
- 2026Metacognition Should Be the Scientific Framework for Bounded and Effective Self-Governance in Generative AI13 May 2026
- 2026TRIAGE: Evaluating Prospective Metacognitive Control in LLMs under Resource Constraints13 May 2026
12 newest of 25 All 25 (JSON)