Revealing Hidden Model Behaviors with Task-Specific Self-Reports
Not on the map. Why?
Abstract (arXiv)
Fine-tuning can give a language model a hidden behavior--it may give false answers under a narrow condition, or give harmful advice only when a prompt touches a particular topic. We introduce the Stabilized Adapter for self-Report (SAR), a lightweight LoRA adapter that makes a fine-tuned model describe its own hidden behavior in plain language, using only the model and the dataset it was trained on. Across seven implanted behaviors, SAR detects the hidden behavior in every one--even when the model has generalized into broad misalignment that the training data alone does not predict. Introspection Adapters (IA), the closest existing baseline, detects some behaviors from our suite but misses others entirely--and where it misses, it hallucinates, consistently reporting wrong behaviors. SAR retains positive signal on every setting where IA fails and roughly halves the rate of hallucinations. This gives practitioners a more reliable tool to audit a fine-tuned model and answer ``what did it actually learn?'' type of questions.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 18 of its 31 references that are in the map. First posted on arXiv 3 Jul 2026.
Builds on
18 of 31 references.
References · 18
- 2025Qwen3 Technical Reportcited by 8,820
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 529
- 2025Persona Vectors: Monitoring and Controlling Character Traits in Language Modelscited by 345
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 136
- 2026The Assistant Axis: Situating and Stabilizing the Default Persona of Language Modelscited by 90
- 2025Convergent Linear Representations of Emergent Misalignmentcited by 71
- 2025Weird Generalization and Inductive Backdoors: New Ways to Corrupt LLMscited by 55
- 2024NNsight and NDIF: Democratizing Access to Open-Weight Foundation Model Internalscited by 45
- 2026AuditBench: Evaluating Alignment Auditing Techniques on Models with Hidden Behaviorscited by 38
- 2025Eliciting Secret Knowledge from Language Modelscited by 27
6 more
- 2026Conditional misalignment: common interventions can hide emergent misalignment behind contextual triggerscited by 17
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviorscited by 11
- 2025Simple Mechanistic Explanations for Out-Of-Context Reasoningcited by 10
- 2026Censored LLMs as a Natural Testbed for Secret Knowledge Elicitationcited by 6
- 2026Split Personality Training: Revealing Latent Knowledge Through Alternate Personalitiescited by 3
- 2025Minimal and Mechanistic Conditions for Behavioral Self-Awareness in LLMscited by 2
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026A Sense of Proprioception in Language Modelscited by 0
- 2026A Sense of Proprioception in Language Models12 Oct 2026