mlsanityData to 7 Oct 2026

Monitoring Monitorability

arXiv 2512.18311 ↗First posted 20 Dec 2025cs.AI cs.SEcited by 47

On the map: LLM reasoning → Prompting and chain-of-thought reasoning

Abstract (arXiv)

Observability into the decision making of modern AI systems may be required to safely deploy increasingly capable agents. Monitoring the chain-of-thought (CoT) of today's reasoning models has proven effective for detecting misbehavior. However, this "monitorability" may be fragile under different training procedures, data sources, or even continued system scaling. To measure and track monitorability, we propose three evaluation archetypes (intervention, process, and outcome-property) and a new monitorability metric, and introduce a broad evaluation suite. We demonstrate that these evaluations can catch simple model organisms trained to have obfuscated CoTs, and that CoT monitoring is more effective than action-only monitoring in practical settings. We compare the monitorability of various frontier models and find that most models are fairly, but not perfectly, monitorable. We also evaluate how monitorability scales with inference-time compute, reinforcement learning optimization, and pre-training model size. We find that longer CoTs are generally more monitorable and that RL optimization does not materially decrease monitorability even at the current frontier scale. Notably, we find that for a model at a low reasoning effort, we could instead deploy a smaller model at a higher reasoning effort (thereby matching capabilities) and obtain a higher monitorability, albeit at a higher overall inference compute cost. We further investigate agent-monitor scaling trends and find that scaling a weak monitor's test-time compute when monitoring a strong agent increases monitorability. Giving the weak monitor access to CoT not only improves monitorability, but it steepens the monitor's test-time compute to monitorability scaling trend. Finally, we show we can improve monitorability by asking models follow-up questions and giving their follow-up CoT to the monitor.

Key facts. Cited by 47 papers in the map (data through 7 Oct 2026). Placed in Prompting and chain-of-thought reasoning, one of 17 directions in LLM reasoning. First posted on arXiv 20 Dec 2025.

Builds on

0 of 0 references.

No references here yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 47.

47 papers.

Sort:

By area:

  1. 2026Reasoning Models Struggle to Control their Chains of Thoughtcited by 22
  2. 2026Counterfactual Simulation Training for Chain-of-Thought Faithfulnesscited by 15
  3. 2026When Benign Inputs Lead to Severe Harms: Eliciting Unsafe Unintended Behaviors of Computer-Use Agentscited by 13
  4. 2026Quantifying the Necessity of Chain of Thought through Opaque Serial Depthcited by 7
  5. 2026Outcome Rewards Do Not Guarantee Verifiable or Causally Important Reasoningcited by 7
  6. 2026Gaming the Judge: Unfaithful Chain-of-Thought Can Undermine Agent Evaluationcited by 6
  7. 2026Probing the Trajectories of Reasoning Traces in Large Language Modelscited by 6
  8. 2026Do explanations generalize across large reasoning models?cited by 5
  9. 2026Monitorability as a Free Gift: How RLVR Spontaneously Aligns Reasoningcited by 4
  10. 2026Why Models Know But Don't Say: Chain-of-Thought Faithfulness Divergence Between Thinking Tokens and Answers in Open-Weight Reasoning Modelscited by 4
  11. 2026ReasonOps: Operator Segmentation for LLM Reasoning Tracescited by 4
  12. 2026LEDGER: Claim-to-Evidence Trace Graphs for Auditing LLM Agentscited by 4
35 more
  1. 2026Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failurescited by 4
  2. 2026Training Agents to Self-Report Misbehaviorcited by 3
  3. 2026Aligned, Orthogonal or In-conflict: When can we safely optimize Chain-of-Thought?cited by 3
  4. 2026Formal Methods Meet LLMs: Auditing, Monitoring, and Intervention for Compliance of Advanced AI Systemscited by 3
  5. 2026Chain-of-thought obfuscation learned from output supervision can generalise to unseen taskscited by 2
  6. 2026Diagnosing Pathological Chain-of-Thought in Reasoning Modelscited by 2
  7. 2026The Detection-Extraction Gap: Models Know the Answer Before They Can Say Itcited by 2
  8. 2026Faithfulness as Information Flow: Evaluating and Training Faithful Chain-of-Thought Reasoningcited by 2
  9. 2026How Transparent is DiffusionGemma?cited by 2
  10. 2026Chain-of-Thought Monitoring Can Be Unreliable in Implicit-Influence Settingscited by 2
  11. 2026Safer Policy Compliance with Dynamic Epistemic Fallbackcited by 1
  12. 2026How Does Unfaithful Reasoning Emerge from Autoregressive Training? A Study of Synthetic Experimentscited by 1
  13. 2026When the Chain Breaks: Interactive Diagnosis of LLM Chain-of-Thought Reasoning Errorscited by 1
  14. 2026Reasoning Dynamics and the Limits of Monitoring Modality Reliance in Vision-Language Modelscited by 1
  15. 2026The Fragility of Chain-of-Thought Monitoring Across Typologically Diverse Languagescited by 1
  16. 2026ReasoningLens: Hierarchical Visualization and Diagnostic Auditing for Large Reasoning Modelscited by 1
  17. 2026Reinforcement Learning Towards Broadly and Persistently Beneficial Modelscited by 1
  18. 2026Length Penalties Make Chain-of-Thought Less Monitorablecited by 1
  19. 2026Position: It's Time to Optimize LLMs for Self-Consistencycited by 1
  20. 2026Monitoring and Discovering Reward Hacking with Internal Representations during LLM Evaluationscited by 1
  21. 2026STATe-of-Thoughts: Structured Action Templates for Tree-of-Thoughtscited by 0
  22. 2026Architecture Determines Observability of Transformerscited by 0
  23. 2026CoT-Guard: Small Models for Strong Monitoringcited by 0
  24. 2026Forecasting Future Behavior as a Learning Taskcited by 0
  25. 2026Chain-of-Thought Faithfulness of Reasoning Models Varies with Where and How Preference Cues Are Deliveredcited by 0
  26. 2026Legibility is Not Interpretability: Comparing Judged and Actual Importance in Chain-Of-Thought Reasoningcited by 0
  27. 2026SchemeArena: Factorized Stress Testing of Scheming in LLM Agentscited by 0
  28. 2026When the Agent Becomes the Kernel: A Systematization of Security on the Path to AI-Native Operating Systemscited by 0
  29. 2026Monitorable Chart Reasoning Agents via Verifiable Process Rewardscited by 0
  30. 2026Taming CoT Obfuscation in VLMs: From Mechanistic Evidence to Activation Enforcementcited by 0
  31. 2026Emergent Collusion in Long-Horizon LLM Agent Interactioncited by 0
  32. 2026When Do Models Admit They Are Wrong? Failure Disclosure Is Unstable Under Reinforcement Learningcited by 0
  33. 2026Correct Answers, Invalid Traces: What Verifiable Grade-School Math Reveals About Chain-of-Thought Tracescited by 0
  34. 2026HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Controlcited by 0
  35. 2026Accurate but Not Humble: Evaluating Epistemic Humility in LLM Agents under Knowledge Conflictcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025A Pragmatic Way to Measure Chain-of-Thought Monitorability
  2. 2025When Chain of Thought is Necessary, Language Models Struggle to Evade Monitors
  3. 2025Investigating CoT Monitorability in Large Reasoning Models
  4. 2025CoT Red-Handed: Stress Testing Chain-of-Thought Monitoring
  5. 2025Reasoning Models Don't Always Say What They Think
  6. 2026Training on Documents About Monitoring Leads to CoT Obfuscation
  7. 2026Noticing the Watcher: LLM Agents Can Infer CoT Monitoring from Blocking Feedback
  8. 2026Monitorability Disposition in Large Reasoning Models