Certified Circuits: Stability Guarantees for Mechanistic Circuits
Not on the map. Why?
Abstract (arXiv)
Understanding how neural networks arrive at their predictions is essential for debugging, auditing, and deployment. Mechanistic interpretability pursues this goal by identifying circuits--minimal subnetworks responsible for specific behaviors. However, existing circuit discovery methods are brittle: circuits depend strongly on the chosen concept dataset and often fail to transfer out-of-distribution, raising doubts whether they capture the concept or merely dataset-specific artifacts. We introduce Certified Circuits, which provide provable stability guarantees for circuit discovery. Our framework wraps any black-box discovery algorithm with randomized data subsampling to certify that inclusion decisions over circuit components--neurons or edges of the model graph, depending on the base algorithm--are invariant to bounded edit-distance perturbations of the concept dataset. Unstable components are abstained from, yielding circuits that are more compact and more accurate. We validate across three architectures (ResNet, ViT, GPT-2) on vision (ImageNet and four OOD datasets) and language (IOI, IOI-Hard, Greater-Than) tasks. Certified circuits achieve up to 56% higher accuracy and up to 80% fewer components, and remain reliable where baselines degrade. Certified Circuits puts circuit discovery on formal ground by producing mechanistic explanations that are provably stable and better aligned with the target concept. Code: https://github.com/AlaaAnani/certified-circuits.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 33 of its 38 references that are in the map. First posted on arXiv 26 Feb 2026.
Builds on
33 of 38 references.
References · 33
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2019Natural Adversarial Examplescited by 1,401
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 700
- 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 462
- 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 415
21 more
- 2023How does GPT-2 compute greater-than?: Interpreting mathematical abilities in a pre-trained language modelcited by 199
- 2023Attribution Patching Outperforms Automated Circuit Discoverycited by 196
- 2023Localizing Model Behavior with Path Patchingcited by 182
- 2024Have Faith in Faithfulness: Going Beyond Circuit Overlap When Finding Model Mechanismscited by 144
- 2021OOD-CV: A Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Imagescited by 46
- 2021Scalable Certified Segmentation via Randomized Smoothingcited by 35
- 2024PURE: Turning Polysemantic Neurons Into Pure Features by Identifying Relevant Circuitscited by 29
- 2021How Well do Feature Visualizations Support Causal Understanding of CNN Activations?cited by 28
- 2023Interpretability Illusions in the Generalization of Simplified Modelscited by 24
- 2024Visual Concept Connectome (VCC): Open World Concept Discovery and their Interlayer Connections in Deep Modelscited by 22
- 2025Verifying Chain-of-Thought Reasoning via Its Computational Graphcited by 20
- 2024Transformer Circuit Faithfulness Metrics are not Robustcited by 18
- 2023RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletioncited by 17
- 2025Mechanistic Interpretability as Statistical Estimation: A Variance Analysiscited by 14
- 2024Automatic Discovery of Visual Circuitscited by 12
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guaranteescited by 10
- 2022Pruning for Feature-Preserving Circuits in CNNscited by 4
- 2025Pixel-level Certified Explanations via Randomized Smoothingcited by 4
- 2024Adaptive Hierarchical Certification for Segmentation using Randomized Smoothingcited by 3
- 2024Adversarial Circuit Evaluationcited by 3
- 2019Interpretable Disentanglement of Neural Networks by Extracting Class-Specific Subnetworkcited by 1
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026When Attribution Patching Lies: Diagnosis and a Second-Order Correctioncited by 2
- 2026Seeing Through Circuits: Faithful Mechanistic Interpretability for Vision Transformerscited by 1
- 2026Engineering Resource-constrained Software Systems with DNN Components: a Concept-based Pruning Approachcited by 0
- 2026Circuit Condensation: Post-Training that Concentrates a Behavior's Causal Circuitcited by 0
- 2026Circuit Condensation: Post-Training that Concentrates a Behavior's Causal Circuit27 Aug 2026
- 2026When Attribution Patching Lies: Diagnosis and a Second-Order Correction5 Jun 2026
- 2026Seeing Through Circuits: Faithful Mechanistic Interpretability for Vision Transformers15 Apr 2026
- 2026Engineering Resource-constrained Software Systems with DNN Components: a Concept-based Pruning Approach11 Apr 2026