Representational Simplicity and Circuit Size Dissociate in a Threshold-Dependent Way: A Controlled Test via Adversarial Training
On the map: Mechanistic interpretability → Circuits and mechanistic analysis also fits: Sparse autoencoder training and evaluation
Abstract (arXiv)
Sparse-autoencoder decomposability and concentrated feature attribution are increasingly treated as evidence that a model's computation is easier to reverse-engineer. Whether this representational and attributional cleanliness actually predicts a smaller or more tractable causal circuit remains an open question. We test this directly using adversarial training as a controlled instrument: it reliably reshapes internal representations, but this alone does not constitute a test of circuit size. We investigate this question through reverse-engineering complexity: the causal structure required to recover a model's behavior at a fixed level of faithfulness. To our knowledge, this is the first controlled empirical test of whether representational or attributional simplicity translates into causal simplicity at the circuit level. Starting from the same pretrained GPT-2 Small checkpoint, we apply matched standard and adversarial continual training, requiring both conditions to retain competence on indirect object identification and pass independent robustness verification before comparing mechanisms. We then compare the models along three complementary axes: sparse-autoencoder decomposability, SAE feature engagement in task attribution, and the size of faithful circuits recovered from the raw computational graph. The robust model is more SAE-decomposable and engages fewer SAE features in task attribution. Circuit size is regime-dependent: on competence-matched IOI, standard leads or ties below 85% faithfulness, but robust needs substantially fewer edges at high faithfulness (90%, 95%), a pattern established on the primary pair while representational trends generalize across a seven-point sweep and a second corpus.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Circuits and mechanistic analysis, one of 13 directions in Mechanistic interpretability. Builds on 35 of its 43 references that are in the map. First posted on arXiv 27 Sep 2026.
Builds on
35 of 43 references.
Closest ancestors · 6
Same direction, newest first
- 2026Conditional Co-Ablation: Recovering Self-Repair Backups in Transformer Circuits2 Jul
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guarantees18 Feb
- 2025EAP-GP: Mitigating Saturation Effect in Gradient-based Automated Circuit Identification7 Feb
- 2023Attribution Patching Outperforms Automated Circuit Discovery16 Oct
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretability28 Apr
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 small1 Nov
Other references · 29
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2024Scaling and evaluating sparse autoencoderscited by 553
- 2024Sparse Feature Circuits: Discovering and Editing Interpretable Causal Graphs in Language Modelscited by 435
- 2017Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradientscited by 236
- 2023How does GPT-2 compute greater-than?: Interpreting mathematical abilities in a pre-trained language modelcited by 202
- 2023The Hydra Effect: Emergent Self-repair in Language Model Computationscited by 156
- 2024Have Faith in Faithfulness: Going Beyond Circuit Overlap When Finding Model Mechanismscited by 149
- 2024BatchTopK Sparse Autoencoderscited by 130
- 2025SAEBench: A Comprehensive Benchmark for Sparse Autoencoders in Language Model Interpretabilitycited by 124
17 more
- 2024Efficient Adversarial Training in LLMs with Continuous Attackscited by 113
- 2020Feature Purification: How Adversarial Training Performs Robust Deep Learningcited by 107
- 2025Sparse Autoencoders Trained on the Same Data Learn Different Featurescited by 93
- 2019On the Connection Between Adversarial Robustness and Saliency Map Interpretabilitycited by 80
- 2024LLM Circuit Analyses Are Consistent Across Training and Scalecited by 63
- 2020Proper Network Interpretability Helps Adversarial Robustness in Classificationcited by 41
- 2024Explorations of Self-Repair in Language Modelscited by 39
- 2019Bridging Adversarial Robustness and Gradient Interpretabilitycited by 22
- 2021Robust Models Are More Interpretable Because Attributions Look Normalcited by 21
- 2025Rethinking Evaluation of Sparse Autoencoders through the Representation of Polysemous Wordscited by 18
- 2024Detecting and Understanding Vulnerabilities in Language Models via Mechanistic Interpretabilitycited by 13
- 2024Beyond Interpretability: The Gains of Feature Monosemanticity on Model Robustnesscited by 13
- 2025Adversarial Examples Are Not Bugs, They Are Superpositioncited by 13
- 2025Evaluating Adversarial Robustness of Concept Representations in Sparse Autoencoderscited by 12
- 2025Superposition as Lossy Compression: Measure with Sparse Autoencoders and Connect to Adversarial Vulnerabilitycited by 7
- 2026Are Sparse Autoencoder Benchmarks Reliable?cited by 4
- 2025Unpacking Robustness in Inflectional Languages: Adversarial Evaluation and Mechanistic Insightscited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026From Geometric Recovery to Causal Validation: A Reproducible Audit of Sparse Autoencoder Features, from Superposition Geometry to Causal Inertness
- 2026Circuit Condensation: Post-Training that Concentrates a Behavior's Causal Circuit
- 2026Posterior-Calibrated Causal Circuits in Variational Autoencoders: Why Image-Domain Interpretability Fails on Tabular Data
- 2026The Predictive-Causal Gap: An Impossibility Theorem and Large-Scale Neural Evidence
- 2025Causality neq Decodability, and Vice Versa: Lessons from Interpreting Counting ViTs
- 2026Causal Dimensionality of Transformer Representations: Measurement, Scaling, and Layer Structure
- 2026Decodability is Not Causality: Dissociating Probe Readouts from Behavioral Drivers via SAE Decomposition
- 2025Projecting Assumptions: The Duality Between Sparse Autoencoders and Concept Geometry