Steering Evaluation-Aware Language Models to Act Like They Are Deployed
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) can sometimes detect when they are being evaluated and adjust their behavior to appear more aligned, compromising the reliability of safety evaluations. In this paper, we show that adding a steering vector to an LLM's activations can suppress evaluation-awareness and make the model act like it is deployed during evaluation. To study our steering technique, we train an LLM to exhibit evaluation-aware behavior using a two-step training process designed to mimic how this behavior could emerge naturally. First, we perform continued pretraining on two sets of documents describing its behavior. The first says that our model uses Python type hints during evaluation but not during deployment. The second says that our model can recognize that the presence of a certain evaluation cue always means that it is being tested. Then, we train the model with expert iteration to use Python type hints in evaluation settings. The resulting model is evaluation-aware: it writes type hints in evaluation contexts more than deployment contexts. We find that activation steering can suppress evaluation awareness and make the model behave during evaluation as it would during deployment. Importantly, we constructed our steering vector using the original model before our additional training. Our results suggest that AI evaluators could improve the reliability of safety evaluations by steering models to act like they are deployed.
Key facts. Cited by 30 papers in the map (data through 7 Oct 2026). First posted on arXiv 23 Oct 2025.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 1; 2026: 29.
30 papers.
Sort:
By area:
- 2026How do LLMs Compute Verbal Confidencecited by 23
- 2026Causal Evidence that Language Models use Confidence to Drive Behaviorcited by 9
- 2025Steering Awareness: Detecting Activation Steering from Withincited by 7
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviourcited by 5
- 2026Consistency Training while Mitigating Obfuscation via Rate Matchingcited by 4
- 2026The Value Axis: Language Models Encode Whether They're on the Right Trackcited by 4
- 2026How LLMs Detect and Correct Their Own Errors: The Role of Internal Confidence Signalscited by 3
- 2026Illusions of Confidence? Diagnosing LLM Truthfulness via Neighborhood Consistencycited by 2
- 2026Is Evaluation Awareness Just Format Sensitivity? Limitations of Probe-Based Evidence under Controlled Prompt Structurecited by 2
- 2026Quantifying Self-Preservation Bias in Large Language Modelscited by 2
- 2026LURE: Live-Usage Replay Evaluations for Reducing Evaluation Awarenesscited by 2
- 2026Models That Know How Evaluations Are Designed Score Safercited by 2
18 more
- 2026Routing Subspaces: Auditing Evaluation-to-Deployment Mismatch in Fine-Tuned Language Modelscited by 2
- 2026CIAware-Bench: Benchmarking Control Intervention Awareness Across Frontier LLMscited by 1
- 2026Evaluation Awareness Is Not One Capability: Evidence from Open Language Modelscited by 1
- 2026Epistemic Goggles: A Pretrained Module that Induces an Epistemic Frame via Gradient Editingcited by 1
- 2026Position: Collusion Risks Among AI Reasoning Agents Justify Certification Requirements for Making Market Decisionscited by 1
- 2026When Evaluation Becomes a Side Channel: Regime Leakage and Structural Mitigations for Alignment Assessmentcited by 0
- 2026Alignment Risks from Capability-Seeking RL Trainingcited by 0
- 2026Questionnaire Responses Do not Capture the Safety of AI Agentscited by 0
- 2026Most Current Model Organisms Are Leaky: Perplexity Differencing Often Reveals Finetuning Objectivescited by 0
- 2026Steer-to-Detect: Probing Hidden Representations for Detection of LLM-Generated Textscited by 0
- 2026Sycophancy Towards Researchers Drives Performative Misalignmentcited by 0
- 2026Defeat Devices in AI Systemscited by 0
- 2026Unsupervised Features Mining via Activation Geometrycited by 0
- 2026Messier: A High-Resolution Corpus for Cross-Benchmark Agent Evaluationcited by 0
- 2026Minimizing Targeted Activations: Input-Only Suppression of Evaluation-Awareness Latents in Large Language Modelscited by 0
- 2026Not All Eval-Awareness Is Equal: Capabilities Framing Predicts Compliancecited by 0
- 2026INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignmentcited by 0
- 2026EvalDetectBench: A Benchmark for Measuring Evaluation Awareness in Frontier Language Modelscited by 0
- 2026INTENT-AS-A-TOOL Makes it Easy to Track Agentic Misalignment27 Aug 2026
- 2026Not All Eval-Awareness Is Equal: Capabilities Framing Predicts Compliance27 Aug 2026
- 2026Minimizing Targeted Activations: Input-Only Suppression of Evaluation-Awareness Latents in Large Language Models28 Jul 2026
- 2026Messier: A High-Resolution Corpus for Cross-Benchmark Agent Evaluation28 Jul 2026
- 2026Unsupervised Features Mining via Activation Geometry5 Jul 2026
- 2026Epistemic Goggles: A Pretrained Module that Induces an Epistemic Frame via Gradient Editing2 Jul 2026
- 2026Defeat Devices in AI Systems27 Jun 2026
- 2026Evaluation Awareness Is Not One Capability: Evidence from Open Language Models22 Jun 2026
- 2026The Value Axis: Language Models Encode Whether They're on the Right Track15 Jun 2026
- 2026CIAware-Bench: Benchmarking Control Intervention Awareness Across Frontier LLMs9 Jun 2026
- 2026EvalDetectBench: A Benchmark for Measuring Evaluation Awareness in Frontier Language Models8 Jun 2026
- 2026Sycophancy Towards Researchers Drives Performative Misalignment7 Jun 2026
18 more
- 2026Consistency Training while Mitigating Obfuscation via Rate Matching1 Jun 2026
- 2026Position: Collusion Risks Among AI Reasoning Agents Justify Certification Requirements for Making Market Decisions29 May 2026
- 2026Models That Know How Evaluations Are Designed Score Safer27 May 2026
- 2026Steer-to-Detect: Probing Hidden Representations for Detection of LLM-Generated Texts13 May 2026
- 2026Routing Subspaces: Auditing Evaluation-to-Deployment Mismatch in Fine-Tuned Language Models11 May 2026
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviour7 May 2026
- 2026Most Current Model Organisms Are Leaky: Perplexity Differencing Often Reveals Finetuning Objectives1 May 2026
- 2026How LLMs Detect and Correct Their Own Errors: The Role of Internal Confidence Signals24 Apr 2026
- 2026LURE: Live-Usage Replay Evaluations for Reducing Evaluation Awareness8 Apr 2026
- 2026Quantifying Self-Preservation Bias in Large Language Models2 Apr 2026
- 2026Causal Evidence that Language Models use Confidence to Drive Behavior23 Mar 2026
- 2026Is Evaluation Awareness Just Format Sensitivity? Limitations of Probe-Based Evidence under Controlled Prompt Structure19 Mar 2026
- 2026How do LLMs Compute Verbal Confidence18 Mar 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026Alignment Risks from Capability-Seeking RL Training12 Feb 2026
- 2026When Evaluation Becomes a Side Channel: Regime Leakage and Structural Mitigations for Alignment Assessment9 Feb 2026
- 2026Illusions of Confidence? Diagnosing LLM Truthfulness via Neighborhood Consistency9 Jan 2026
- 2025Steering Awareness: Detecting Activation Steering from Within26 Nov 2025
- 2026Alignment Risks from Capability-Seeking RL Trainingcited by 0
- 2026Alignment Risks from Capability-Seeking RL Training12 Feb 2026
- 2026How do LLMs Compute Verbal Confidencecited by 23
- 2026Causal Evidence that Language Models use Confidence to Drive Behaviorcited by 9
- 2025Steering Awareness: Detecting Activation Steering from Withincited by 7
- 2026Consistency Training while Mitigating Obfuscation via Rate Matchingcited by 4
- 2026The Value Axis: Language Models Encode Whether They're on the Right Trackcited by 4
- 2026How LLMs Detect and Correct Their Own Errors: The Role of Internal Confidence Signalscited by 3
- 2026Illusions of Confidence? Diagnosing LLM Truthfulness via Neighborhood Consistencycited by 2
- 2026Is Evaluation Awareness Just Format Sensitivity? Limitations of Probe-Based Evidence under Controlled Prompt Structurecited by 2
- 2026LURE: Live-Usage Replay Evaluations for Reducing Evaluation Awarenesscited by 2
- 2026Models That Know How Evaluations Are Designed Score Safercited by 2
- 2026Routing Subspaces: Auditing Evaluation-to-Deployment Mismatch in Fine-Tuned Language Modelscited by 2
- 2026CIAware-Bench: Benchmarking Control Intervention Awareness Across Frontier LLMscited by 1
12 most cited of 24 All 24 (JSON)
- 2026Not All Eval-Awareness Is Equal: Capabilities Framing Predicts Compliance27 Aug 2026
- 2026Minimizing Targeted Activations: Input-Only Suppression of Evaluation-Awareness Latents in Large Language Models28 Jul 2026
- 2026Messier: A High-Resolution Corpus for Cross-Benchmark Agent Evaluation28 Jul 2026
- 2026Unsupervised Features Mining via Activation Geometry5 Jul 2026
- 2026Epistemic Goggles: A Pretrained Module that Induces an Epistemic Frame via Gradient Editing2 Jul 2026
- 2026Defeat Devices in AI Systems27 Jun 2026
- 2026Evaluation Awareness Is Not One Capability: Evidence from Open Language Models22 Jun 2026
- 2026The Value Axis: Language Models Encode Whether They're on the Right Track15 Jun 2026
- 2026CIAware-Bench: Benchmarking Control Intervention Awareness Across Frontier LLMs9 Jun 2026
- 2026EvalDetectBench: A Benchmark for Measuring Evaluation Awareness in Frontier Language Models8 Jun 2026
- 2026Sycophancy Towards Researchers Drives Performative Misalignment7 Jun 2026
- 2026Consistency Training while Mitigating Obfuscation via Rate Matching1 Jun 2026
12 newest of 24 All 24 (JSON)