Evaluation Awareness in Language Models: Representation, Verbalization, and Control
Not on the map. Why?
Abstract (arXiv)
Both capability and safety benchmarks rest upon the assumption that the behavior of language models undergoing a test is informative about their behavior in deployment. This assumption can fail, should models infer that they are being evaluated and condition their response on such context. This hypothesis, termed ``evaluation awareness'', has been observed in frontier and open-weight language models alike. We provide a systematic study of this phenomenon, by probing for it across six language models (from four families and three sizes) and three metrics. More precisely, we examine whether (i) being under evaluation is linearly represented within the models' activations space, (ii) it is verbalized in their output tokens (as scored by an LLM-as-judge), and (iii) steering causally affects their behavior. For the open-checkpoint Olmo models, we further test these measures at every training stage. In doing so, we report that evaluation awareness is linearly decodable from the residual streams of every model (best AUROC ≥ 0.7). By contrast, these representations align only in part with verbalization: their correlations and mutual information are nonzero in some settings, yet vary substantially across models, layers, and readout choices. Nevertheless, steering along probe-derived directions can shift the verbalization scores. Finally, a comparison across the Olmo checkpoints reveals that evaluation awareness is already present within base models, becomes amplified throughout the stages of supervised fine-tuning, and remains stable thereafter---unlike the effects of steering, that grow more pronounced at every successive training stage. These results show the need for evaluations to account for the disjunction between what models represent internally, what they verbalize, and their steering.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 16 of its 31 references that are in the map. First posted on arXiv 22 Aug 2026.
Builds on
16 of 31 references.
References · 16
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2016Understanding intermediate layers using linear classifier probescited by 1,353
- 2023Steering Language Models With Activation Engineeringcited by 922
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 629
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 529
- 2024Frontier Models are Capable of In-context Schemingcited by 287
- 2023Taken out of context: On measuring situational awareness in LLMscited by 143
- 2025Large Language Models Often Know When They Are Being Evaluatedcited by 128
- 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systemscited by 72
- 2025Probing and Steering Evaluation Awareness of Language Modelscited by 35
- 2025Probe-Rewrite-Evaluate: A Workflow for Reliable Benchmarks and Quantifying Evaluation Awarenesscited by 9
4 more
- 2026Evaluation Awareness in Language Models Has Limited Effect on Behaviourcited by 7
- 2026Language models recognize dropout and Gaussian noise applied to their activationscited by 5
- 2026Models That Know How Evaluations Are Designed Score Safercited by 4
- 2026Is Evaluation Awareness Just Format Sensitivity? Limitations of Probe-Based Evidence under Controlled Prompt Structurecited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026Xeno-Interpretability: Investigating the Alien Minds of LLMs17 Sep 2026