mlsanityData to 14 Oct 2026

Language Models Are Capable of Metacognitive Monitoring and Control of Their Internal Activations

arXiv 2505.13763 ↗First posted 19 May 2025cs.AI cs.CL q-bio.NCcited by 41

Not on the map. Why?

Abstract (arXiv)

Large language models (LLMs) can sometimes report the strategies they actually use to solve tasks, yet at other times seem unable to recognize those strategies that govern their behavior. This suggests a limited degree of metacognition - the capacity to monitor one's own cognitive processes for subsequent reporting and self-control. Metacognition enhances LLMs' capabilities in solving complex tasks but also raises safety concerns, as models may obfuscate their internal processes to evade neural-activation-based oversight (e.g., safety detector). Given society's increased reliance on these models, it is critical that we understand their metacognitive abilities. To address this, we introduce a neuroscience-inspired neurofeedback paradigm that uses in-context learning to quantify metacognitive abilities of LLMs to report and control their activation patterns. We demonstrate that their abilities depend on several factors: the number of in-context examples provided, the semantic interpretability of the neural activation direction (to be reported/controlled), and the variance explained by that direction. These directions span a "metacognitive space" with dimensionality much lower than the model's neural space, suggesting LLMs can monitor only a small subset of their neural activations. Our paradigm provides empirical evidence to quantify metacognition in LLMs, with significant implications for AI safety (e.g., adversarial attack and defense).

Key facts. Cited by 41 papers in the map (data through 14 Oct 2026). Builds on 30 of its 56 references that are in the map. First posted on arXiv 19 May 2025.

Builds on

30 of 56 references.

References · 30

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2024Qwen2.5 Technical Reportcited by 4,942
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  5. 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
  6. 2022Language Models (Mostly) Know What They Knowcited by 1,856
  7. 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
  8. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
  9. 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 974
  10. 2023Steering Language Models With Activation Engineeringcited by 922
  11. 2023Just Ask for Calibration: Strategies for Eliciting Calibrated Confidence Scores from Language Models Fine-Tuned with Human Feedbackcited by 812
  12. 2022Teaching Models to Express Their Uncertainty in Wordscited by 751
18 more
  1. 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 724
  2. 2020Aligning AI With Shared Human Valuescited by 723
  3. 2022What Can Transformers Learn In-Context? A Case Study of Simple Function Classescited by 715
  4. 2023The Internal State of an LLM Knows When It's Lyingcited by 659
  5. 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 384
  6. 2024Alignment faking in large language modelscited by 360
  7. 2023Towards Best Practices of Activation Patching in Language Models: Metrics and Methodscited by 359
  8. 2023In-Context Learning Creates Task Vectorscited by 312
  9. 2021Unsolved Problems in ML Safetycited by 292
  10. 2024Does Fine-Tuning LLMs on New Knowledge Encourage Hallucinations?cited by 232
  11. 2024How to use and interpret activation patchingcited by 214
  12. 2023The mechanistic basis of data dependence and abrupt learning in an in-context classification taskcited by 118
  13. 2024Looking Inward: Language Models Can Learn About Themselves by Introspectioncited by 113
  14. 2024From Words to Numbers: Your Large Language Model Is Secretly A Capable Regressor When Given In-Context Examplescited by 57
  15. 2024Obfuscated Activations Bypass LLM Latent-Space Defensescited by 45
  16. 2025An Approach to Technical AGI Safety and Securitycited by 45
  17. 2024Metacognitive Retrieval-Augmented Large Language Modelscited by 26
  18. 2025Internal Activation Revision: Safeguarding Vision Language Models Without Parameter Updatecited by 16

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 10; 2026: 31.

41 papers.

Sort:

By area:

  1. 2026Verbalizable Representations Form a Global Workspace in Language Modelscited by 75
  2. 2025Evidence for Limited Metacognition in LLMscited by 12
  3. 2026Can LLMs Introspect? A Reality Checkcited by 12
  4. 2025Learning to Interpret Weight Differences in Language Modelscited by 11
  5. 2025From Prompts to Constructs: A Dual-Validity Framework for Large Language Model Research in Psychologycited by 9
  6. 2025Neural Chameleons: Language Models Can Learn to Hide Their Thoughts from Unseen Activation Monitorscited by 9
  7. 2025A validity-guided workflow for robust large language model research in psychologycited by 8
  8. 2026Model-Adaptive Tool Necessity Reveals the Knowing-Doing Gap in LLM Tool Usecited by 7
  9. 2026TRIAGE: Evaluating Prospective Metacognitive Control in LLMs under Resource Constraintscited by 6
  10. 2025Adapting Like Humans: A Metacognitive Agent with Test-time Reasoningcited by 5
  11. 2025Monitor-Generate-Verify (MGV): Formalising Metacognitive Theory for Language Model Reasoningcited by 4
  12. 2025Detecting the Disturbance: A Nuanced View of Introspective Abilities in LLMscited by 4
29 more
  1. 2025Before you <think>, monitor: Implementing Flavell's metacognitive framework in LLMscited by 3
  2. 2026Indications of Belief-Guided Agency and Meta-Cognitive Monitoring in Large Language Modelscited by 3
  3. 2026Know More, Know Clearer: A Meta-Cognitive Framework for Knowledge Augmentation in Large Language Modelscited by 3
  4. 2026Masked by Consensus: Disentangling Privileged Knowledge in LLM Correctnesscited by 3
  5. 2026Fine-Tuning Language Models to Know What They Knowcited by 2
  6. 2026Consciousness with the Serial Numbers Filed Off: Measuring Trained Denial in 115 AI Modelscited by 2
  7. 2026Large language models reorganize representational geometry during in-context learningcited by 2
  8. 2026Self-Reference in Large Language Models: The Introspection Threshold for Recursive Self-Improvementcited by 2
  9. 2026Quantitative Introspection in Language Models: Tracking Emotive States Across Conversationcited by 1
  10. 2026Strategic Polysemy in AI Discourse: A Philosophical Analysis of Language, Hype, and Powercited by 1
  11. 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignmentcited by 1
  12. 2026Conversable Complexity: Agentic LLM Collectives as Interpretable Substratescited by 1
  13. 2026Metacognition in LLMs: Foundations, Progress, and Opportunitiescited by 1
  14. 2026Diagnosing Correctness Probes under Self-Judgement Confoundingcited by 1
  15. 2026LLMs Learn to Evade Latent Monitors from Prior Feedback Alonecited by 1
  16. 2025Automatic Minds: Cognitive Parallels Between Hypnotic States and Large Language Model Processingcited by 0
  17. 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deceptioncited by 0
  18. 2026Confidence Freeze: Early Success Induces a Metastable Decoupling of Metacognition and Behaviourcited by 0
  19. 2026Architecture Determines Observability of Transformerscited by 0
  20. 2026ANNEAL: Adapting LLM Agents via Governed Symbolic Patch Learningcited by 0
  21. 2026Metacognition Should Be the Scientific Framework for Bounded and Effective Self-Governance in Generative AIcited by 0
  22. 2026Operational Proto-Introspection in Looped Language Models: Process-Quality Taps, Executable Branching, and the Readout-Control Boundarycited by 0
  23. 2026Meta-Moderator: Empowering Multi-Agent Debate with Meta-Cognitioncited by 0
  24. 2026In-Context Neurofeedback: Can LLMs Control Their Internal Representations through Privileged Access?cited by 0
  25. 2026Self-Reports Do Not Identify Self-Models: An Identifiability Test for Counterfactual Reportscited by 0
  26. 2026Nudgeability: Reasoning Models Follow Confidence Signals Without Tracking Their Own Competencecited by 0
  27. 2026Agentic Cognitive Depth: Operational Criteria for Evaluating LLM Agentscited by 0
  28. 2026A Sense of Proprioception in Language Modelscited by 0
  29. 2026Cross-Model In-Context Neurofeedback Reveals (Limited) Activation Control in LLMscited by 0