Why Does Robustness Reduce Superposition?
Not on the map. Why?
Abstract (arXiv)
The study of adversarial examples and their origins remains an open area of research. Mechanistic interpretability, and superposition in particular, offers new avenues for approaching this problem. Gorton & Lewis (2025) demonstrate that adversarial examples arise from superposition and show empirically that adversarial training reduces superposition, yet provide no mechanistic account of why this occurs. We present an empirical explanation inspired by the feature taxonomy of Ilyas et al. (2019), tracing the following chain of causalities: adversarial training abandons non-robust features, leading to fewer total features to represent, resulting in less superposition.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 7 of its 7 references that are in the map. First posted on arXiv 23 Aug 2026.
Builds on
7 of 7 references.
References · 7
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2022Toy Models of Superpositioncited by 928
- 2025Adversarial Examples Are Not Bugs, They Are Superpositioncited by 13
- 2024Adversarial Training Can Provably Improve Robustness: Theoretical Analysis of Feature Learning Process Under Structured Datacited by 12
Built on by
Not cited yet.