mlsanityData to 7 Oct 2026

Activation Oracles: Training and Evaluating LLMs as General-Purpose Activation Explainers

arXiv 2512.15674 ↗First posted 17 Dec 2025cs.CL cs.AI cs.LGcited by 41

Not on the map. Why?

Abstract (arXiv)

Large language model (LLM) activations are notoriously difficult to understand, with most existing techniques using complex, specialized methods for interpreting them. Recent work has proposed a simpler approach known as LatentQA: training LLMs to directly accept LLM activations as inputs and answer arbitrary questions about them in natural language. However, prior work has focused on narrow task settings for both training and evaluation. In this paper, we instead take a generalist perspective. We evaluate LatentQA-trained models, which we call Activation Oracles (AOs), in far out-of-distribution settings and examine how performance scales with training data diversity. We find that AOs can recover information fine-tuned into a model (e.g., biographical knowledge or malign propensities) that does not appear in the input text, despite never being trained with activations from a fine-tuned model. Our main evaluations are four downstream tasks where we can compare to prior white- and black-box techniques. We find that even narrowly-trained LatentQA models can generalize well, and that adding additional training datasets (such as classification tasks and a self-supervised context prediction task) yields consistent further improvements. Our best AOs match or exceed white-box baselines on all four tasks and the best overall baseline on 3 of 4. These results suggest that diversified training to answer natural-language queries imparts a general capability to verbalize information about LLM activations.

Key facts. Cited by 41 papers in the map (data through 7 Oct 2026). Builds on 23 of its 37 references that are in the map. First posted on arXiv 17 Dec 2025.

Builds on

23 of 37 references.

References · 23

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  2. 2015A large annotated corpus for learning natural language inferencecited by 1,837
  3. 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,359
  4. 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,009
  5. 2023Steering Language Models With Activation Engineeringcited by 824
  6. 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 673
  7. 2023Eliciting Latent Predictions from Transformers with the Tuned Lenscited by 579
  8. 2023LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Datasetcited by 449
  9. 2024Patchscopes: A Unifying Framework for Inspecting Hidden Representations of Language Modelscited by 225
  10. 2023Linearity of Relation Decoding in Transformer Language Modelscited by 190
  11. 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMscited by 158
  12. 2025Are Sparse Autoencoders Useful? A Case Study in Sparse Probingcited by 109
11 more
  1. 2024Automatically Interpreting Millions of Features in Large Language Modelscited by 106
  2. 2025Model Organisms for Emergent Misalignmentcited by 84
  3. 2020Multi-Dimensional Gender Bias Classificationcited by 80
  4. 2024SelfIE: Self-Interpretation of Large Language Model Embeddingscited by 63
  5. 2024LatentQA: Teaching LLMs to Decode Activations Into Natural Languagecited by 49
  6. 2025Training Language Models to Explain Their Own Computationscited by 27
  7. 2025Narrow Finetuning Leaves Clearly Readable Traces in Activation Differencescited by 24
  8. 2025Eliciting Secret Knowledge from Language Modelscited by 23
  9. 2025Learning to Interpret Weight Differences in Language Modelscited by 9
  10. 2025Do Activation Verbalization Methods Convey Privileged Information?cited by 8
  11. 2024Meta-Models: An Architecture for Decoding LLM Behaviors Through Interpreted Embeddings and Natural Languagecited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 41.

41 papers.

Sort:

By area:

  1. 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviorscited by 8
  2. 2026Can LLMs Introspect? A Reality Checkcited by 8
  3. 2026Delta-Crosscoder: Robust Crosscoder Model Diffing in Narrow Fine-Tuning Regimescited by 4
  4. 2026The Model Organism Lottery: Model Organism Interpretability Strongly Depends on Training Methodologycited by 4
  5. 2026Tracing Persona Vectors Through LLM Pretrainingcited by 3
  6. 2026Introspective Coupling: Self-Explanation Training Tracks Behavioral Change Despite Fixed Supervisioncited by 3
  7. 2026Your Agentic LLMs Secretly Encode Indirect Prompt-Injection Exposure in Hidden Statescited by 3
  8. 2026How LLMs Are Persuaded: A Few Attention Heads, Reroutedcited by 2
  9. 2026"Did you lie?" Evaluating Lie Detectors across Model Scale and Belief-Verified Model Organismscited by 2
  10. 2026How Transparent is DiffusionGemma?cited by 2
  11. 2026Language Models Can Explain Visual Features via Steeringcited by 1
  12. 2026Confidence and Calibration of Activation Oracles for Reliable Interpretation of Language Model Internalscited by 1
29 more
  1. 2026Building Better Activation Oraclescited by 1
  2. 2026SAEExplainer: Interpreting SAE Features with Activation-Guided Preference Optimizationcited by 1
  3. 2026The Impossibility of Eliciting Latent Knowledgecited by 1
  4. 2026Decoding Hidden Deception in Reasoning LLMs: Activation Explainers for Deception Auditingcited by 1
  5. 2026Retrieval is Enough: Training-Free Interpretability with a Tool-Using Agentcited by 1
  6. 2026When Activation Oracles Learn Not to Read: Concept-Specific Blind Spots in Fine-Tuned Oraclescited by 1
  7. 2026Stress-Testing Alignment Audits With Prompt-Level Strategic Deceptioncited by 0
  8. 2026Learning Self-Interpretation from Interpretability Artifacts: Training Lightweight Adapters on Vector-Label Pairscited by 0
  9. 2026Epistemic Observability in Language Modelscited by 0
  10. 2026From Correlation to Cause: A Five-Stage Methodology for Feature Analysis in Transformer Language Modelscited by 0
  11. 2026PRISM: Recovering Instruction Sets from Language Model Activationscited by 0
  12. 2026The Arbiter Agent: Continually Monitoring Multi-Agent Conversations to Detect Emergent Misalignmentcited by 0
  13. 2026Forecasting Future Behavior as a Learning Taskcited by 0
  14. 2026Unsupervised Features Mining via Activation Geometrycited by 0
  15. 2026Introspection Fine-Tuning (IFT): Training Small LLMs to Introspectcited by 0
  16. 2026Committed Before Reasoning: Behavioral Reproduction and Preliminary Activation-Level Evidence of Answer Pre-Commitment in an Open-Weight LLMcited by 0
  17. 2026Probing Latent Colombian Identity Inferences in Qwen2.5-7B with Natural Language Autoencoderscited by 0
  18. 2026Sky sphere representation in language modelscited by 0
  19. 2026Does Out-of-Sight Equal Out-of-Mind in CoT Monitorability?cited by 0
  20. 2026SAEVerbalizer: Generating Explanations for Sparse Autoencoder Features via Representation Verbalizationcited by 0
  21. 2026On Emergent Capabilities and Model Mergingcited by 0
  22. 2026A Function-Level Vulnerability Score Measures Flag Rate More Than the Model: Protocol Effects on Paired Benchmarkscited by 0
  23. 2026Understanding Confabulation and Rethinking Reconstruction in Activation Explanationscited by 0
  24. 2026Faithful Activation Verbalization: Reducing Hallucinations in LLM Representation Interpretationcited by 0
  25. 2026Selecting The Most Informative Tokens in Natural Language Autoencoderscited by 0
  26. 2026Weights Read and Write Features: Scalable Parameter Decomposition Grounded in Activation Spacecited by 0
  27. 2026Rep2Skill: Representation-Guided Skill Self-Evolution for LLM Agentscited by 0
  28. 2026Distillation for Incrimination and Distillation for Capabilitiescited by 0
  29. 2026Caught in the Act: Probes Effectively Detect Sabotage and Catch Unverbalized Deceptioncited by 0