Believe It or Not: How Deeply do LLMs Believe Implanted Facts?
Not on the map. Why?
Abstract (arXiv)
Knowledge editing techniques promise to implant new factual knowledge into large language models (LLMs). But do LLMs really believe these facts? We develop a framework to measure belief depth and use it to evaluate the success of knowledge editing techniques. We operationalize belief depth as the extent to which implanted knowledge 1) generalizes to related contexts (e.g. Fermi estimates several logical steps removed), 2) is robust to self-scrutiny and direct challenge, and 3) is represented similarly to genuine knowledge (as measured by linear probes). Our evaluations show that simple prompting and mechanistic editing techniques fail to implant knowledge deeply. In contrast, Synthetic Document Finetuning (SDF) - where models are trained on LLM-generated documents consistent with a fact - often succeeds at implanting beliefs that behave similarly to genuine knowledge. However, SDF's success is not universal, as implanted beliefs that contradict basic world knowledge are brittle and representationally distinct from genuine knowledge. Overall, our work introduces measurable criteria for belief depth and enables the rigorous evaluation necessary for deploying knowledge editing in real-world applications.
Key facts. Cited by 24 papers in the map (data through 14 Oct 2026). First posted on arXiv 20 Oct 2025.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 1; 2026: 23.
24 papers.
Sort:
By area:
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 13
- 2026Shaping capabilities with token-level data filteringcited by 13
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviorscited by 11
- 2026Where is the Mind? Persona Vectors and LLM Individuationcited by 10
- 2026Negation Neglect: When models fail to learn negations in trainingcited by 6
- 2026Delta-Crosscoder: Robust Crosscoder Model Diffing in Narrow Fine-Tuning Regimescited by 4
- 2026Alignment midtraining for animalscited by 4
- 2026Models That Know How Evaluations Are Designed Score Safercited by 4
- 2026When Role-playing, Do Models Believe What They Say?cited by 4
- 2026Indications of Belief-Guided Agency and Meta-Cognitive Monitoring in Large Language Modelscited by 3
- 2026Measuring Reward-Seeking via Contrastive Belief Updatescited by 3
- 2026Illusions of Confidence? Diagnosing LLM Truthfulness via Neighborhood Consistencycited by 2
12 more
- 2026Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMscited by 2
- 2026Finding RELIEF: Shaping Reasoning Behavior without Reasoning Supervision via Belief Engineeringcited by 1
- 2026Epistemic Goggles: A Pretrained Module that Induces an Epistemic Frame via Gradient Editingcited by 1
- 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deceptioncited by 0
- 2026Diff Mining: Logit Differences Reveal Finetuning Objectivescited by 0
- 2026Story Imprinting: AI Assistants Absorb Traits from Human Characters They Resemblecited by 0
- 2026Shallow Beliefs: Synthetic document finetuning does not inoculate against emergent misalignment from reward hackingcited by 0
- 2026AI Agents are Vulnerable to Radicalizationcited by 0
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlationscited by 0
- 2026Pre-training interventions, ex post facto: Grafting model beliefs across checkpointscited by 0
- 2026Misinformation Without Triggers: From Factual Answers to Downstream Decisionscited by 0
- 2026How to train your model organismcited by 0
- 2026How to train your model organism7 Oct 2026
- 2026Misinformation Without Triggers: From Factual Answers to Downstream Decisions2 Oct 2026
- 2026Pre-training interventions, ex post facto: Grafting model beliefs across checkpoints30 Sep 2026
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlations30 Sep 2026
- 2026AI Agents are Vulnerable to Radicalization29 Sep 2026
- 2026Shallow Beliefs: Synthetic document finetuning does not inoculate against emergent misalignment from reward hacking14 Sep 2026
- 2026Story Imprinting: AI Assistants Absorb Traits from Human Characters They Resemble9 Sep 2026
- 2026Diff Mining: Logit Differences Reveal Finetuning Objectives26 Aug 2026
- 2026Measuring Reward-Seeking via Contrastive Belief Updates21 Jul 2026
- 2026Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs21 Jul 2026
- 2026Epistemic Goggles: A Pretrained Module that Induces an Epistemic Frame via Gradient Editing2 Jul 2026
- 2026When Role-playing, Do Models Believe What They Say?9 Jun 2026
12 more
- 2026Models That Know How Evaluations Are Designed Score Safer27 May 2026
- 2026Negation Neglect: When models fail to learn negations in training13 May 2026
- 2026Where is the Mind? Persona Vectors and LLM Individuation18 Apr 2026
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviors18 Apr 2026
- 2026Alignment midtraining for animals21 Mar 2026
- 2026Delta-Crosscoder: Robust Crosscoder Model Diffing in Narrow Fine-Tuning Regimes16 Feb 2026
- 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deception9 Feb 2026
- 2026Indications of Belief-Guided Agency and Meta-Cognitive Monitoring in Large Language Models2 Feb 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2026Finding RELIEF: Shaping Reasoning Behavior without Reasoning Supervision via Belief Engineering20 Jan 2026
- 2026Illusions of Confidence? Diagnosing LLM Truthfulness via Neighborhood Consistency9 Jan 2026
- 2025Difficulties with Evaluating a Deception Detector for AIs27 Nov 2025
- 2026Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMscited by 2
- 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deceptioncited by 0
- 2026How to train your model organismcited by 0
- 2026How to train your model organism7 Oct 2026
- 2026Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs21 Jul 2026
- 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deception9 Feb 2026
- 2026AI Agents are Vulnerable to Radicalizationcited by 0
- 2026AI Agents are Vulnerable to Radicalization29 Sep 2026
- 2026Measuring Reward-Seeking via Contrastive Belief Updatescited by 3
- 2026Measuring Reward-Seeking via Contrastive Belief Updates21 Jul 2026
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 13
- 2026Shaping capabilities with token-level data filteringcited by 13
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviorscited by 11
- 2026Where is the Mind? Persona Vectors and LLM Individuationcited by 10
- 2026Negation Neglect: When models fail to learn negations in trainingcited by 6
- 2026Delta-Crosscoder: Robust Crosscoder Model Diffing in Narrow Fine-Tuning Regimescited by 4
- 2026Alignment midtraining for animalscited by 4
- 2026Models That Know How Evaluations Are Designed Score Safercited by 4
- 2026When Role-playing, Do Models Believe What They Say?cited by 4
- 2026Indications of Belief-Guided Agency and Meta-Cognitive Monitoring in Large Language Modelscited by 3
- 2026Illusions of Confidence? Diagnosing LLM Truthfulness via Neighborhood Consistencycited by 2
- 2026Epistemic Goggles: A Pretrained Module that Induces an Epistemic Frame via Gradient Editingcited by 1
12 most cited of 17 All 17 (JSON)
- 2026Misinformation Without Triggers: From Factual Answers to Downstream Decisions2 Oct 2026
- 2026Pre-training interventions, ex post facto: Grafting model beliefs across checkpoints30 Sep 2026
- 2026Stress-Testing LLM Lie Detectors: Role-Play Failures and Spurious Correlations30 Sep 2026
- 2026Story Imprinting: AI Assistants Absorb Traits from Human Characters They Resemble9 Sep 2026
- 2026Diff Mining: Logit Differences Reveal Finetuning Objectives26 Aug 2026
- 2026Epistemic Goggles: A Pretrained Module that Induces an Epistemic Frame via Gradient Editing2 Jul 2026
- 2026When Role-playing, Do Models Believe What They Say?9 Jun 2026
- 2026Models That Know How Evaluations Are Designed Score Safer27 May 2026
- 2026Negation Neglect: When models fail to learn negations in training13 May 2026
- 2026Where is the Mind? Persona Vectors and LLM Individuation18 Apr 2026
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviors18 Apr 2026
- 2026Alignment midtraining for animals21 Mar 2026
12 newest of 17 All 17 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025ThinkEval: Practical Evaluation of Knowledge Leakage in LLM Editing using Thought-based Knowledge Graphs
- 2024Navigating the Dual Facets: A Comprehensive Evaluation of Sequential Memory Editing in Large Language Models
- 2025Benchmarking and Rethinking Knowledge Editing for Large Language Models
- 2024See the Unseen: Better Context-Consistent Knowledge-Editing by Noises
- 2025KnowledgeSmith: Uncovering Knowledge Updating in LLMs with Model Editing and Unlearning
- 2025Knowledge Updating? No More Model Editing! Just Selective Contextual Reasoning
- 2025Towards Meta-Cognitive Knowledge Editing for Multimodal LLMs
- 2025Multi-round, Chain-of-thought Post-editing for Unfaithful Summaries