Steering Awareness: Models Can Be Trained to Detect Activation Steering
Fine-tuning LLMs with LoRA lets them reliably detect activation steering and often name the injected concept, threatening the validity of steering-based safety evaluations.
AI research and discussion on LessWrong. www.lesswrong.com
Fine-tuning LLMs with LoRA lets them reliably detect activation steering and often name the injected concept, threatening the validity of steering-based safety evaluations.
Fine-tuning a 7B chat model lets it detect activation steering on unseen concepts with 85% accuracy and no false positives, raising concerns about steering-based evaluations and refusal training suppressing introspection.
Tests whether steering Llama 3.3 70B with SAE features tied to sandbagging or evaluation awareness can recover hidden capabilities; steering recovers up to about 25%, less than a simple prompt suffix.
Introduces Among Us as a sandbox where LLM agents deceive naturally, measures deceptive capability with Deception ELO, and shows linear probes and SAEs detect out-of-distribution deception well.