PreprintCited by 39Explainable Artificial Intelligence (XAI)Topic ModelingAdversarial Robustness in Machine Learning

The DOI matches its DataCite record; 45 of the 45 references it cites were found in a registry or an index; none of the 24 sources its claims cite is checked for support yet.

Scaling Monosemanticity: Extracting Interpretable Features from Claude 3 Sonnet

Open access

Abstract

We demonstrate that sparse autoencoders can extract interpretable features from Claude 3 Sonnet, a production-scale language model, addressing the open question of whether dictionary learning methods scale beyond small transformers. We trained sparse autoencoders with up to 34 million features on the model's middle layer residual stream, using scaling laws to guide hyperparameter selection. The resulting features are multilingual and multimodal (generalizing to images despite text-only training), respond to both concrete instances and abstract discussions of concepts, and can be used to steer model behavior in ways consistent with their interpretations. We find features corresponding to famous entities and locations, as well as more abstract concepts like sarcasm or errors in code. We also identify features relevant to ways in which language models might cause harm--including features representing deception, power-seeking, sycophancy, and bias--and show that these causally influence model outputs when manipulated. Additionally, we conduct analyses of feature interpretability, geometry, and computational function. However, significant limitations remain: our suite of features is incomplete, and we lack rigorous methods for evaluating whether our features faithfully capture model computations.

Overview

AI snapshot

Written from the paper’s full text.

TL;DR

Sparse autoencoders trained on Claude 3 Sonnet’s middle-layer residual stream extract millions of interpretable, multilingual, and multimodal features, including safety-relevant ones, and feature steering causally alters model behavior. The authors present scaling laws for SAE training but caution that the feature set is incomplete and lacks rigorous evaluation of faithfulness.

Key findings

  • They trained SAEs with 1,048,576 (~1M), 4,194,304 (~4M), and 33,554,432 (~34M) features; average active features per token were fewer than 300, and reconstruction explained at least 65% of activation variance. Dead-feature proportions were roughly 2% for the 1M SAE, 35% for the 4M SAE, and 65% for the 34M SAE.
  • Features generalized beyond text: they were multilingual and activated on images despite text-only SAE training, and they responded to both concrete instances and abstract discussions of concepts. Examples include Golden Gate Bridge, brain sciences, transit infrastructure, code errors, addition functions, famous people, countries, and list positions.
  • Feature steering causally changed outputs in interpretable ways: clamping the Golden Gate Bridge feature made the model self-identify as the bridge; clamping a code-error feature induced hallucinated errors; safety-relevant features for deception, power-seeking, sycophancy, bias, unsafe code, backdoors, and biological weapons also influenced behavior when manipulated.
  • SAE features were more interpretable and specific than neurons: for 82% of features, the most-correlated neuron had correlation ≤0.3; random SAE features were significantly more interpretable and specific than random MLP neurons. The 34M SAE found features for only about 60% of London boroughs, suggesting incompleteness.

Methods

  • Trained sparse autoencoders on middle-layer residual stream activations of Claude 3 Sonnet, using a text-only dataset from The Pile (excluding books3) and Common Crawl. Three SAE sizes were trained: ~1M, ~4M, and ~34M features, with L1 coefficient 5 and scaling laws used to choose training steps, feature count, and learning rates.
  • The SAE encoder maps activations to a higher-dimensional ReLU layer; the decoder reconstructs activations. Loss combines reconstruction MSE and an L1 penalty on feature activations weighted by decoder norm.
  • Evaluated features with automated interpretability using Claude 3 Opus, a specificity rubric, feature steering, attribution, and ablation. Steering clamps a feature’s activation in the SAE reconstruction and runs downstream forward passes; attribution uses gradient of a logit difference dotted with the feature vector times activation; ablation clamps a feature to zero.

Limitations

  • The paper states the feature suite is incomplete, there are no rigorous methods for evaluating whether features faithfully capture model computations, the training objective is only a proxy for interpretability, cross-layer superposition remains unresolved, not all features have been found, compute may be prohibitive, L1 causes shrinkage, training data was text-only and lacked Human/Assistant and image data, and safety features are not shown to be actually useful for safety.
  • The text also makes evident that many results rely on qualitative examples, including a “somewhat cherry-picked” attribution example; steering often requires clamping features outside their observed range; specificity weakens at low activations; and automated interpretability may misrepresent a feature’s actual function.

Model-written summary. Check it against the paper before relying on it.

Integrity signals

Registry

DataCite · 10.48550/arxiv.2605.29358

Cites

45 of 45 references verified0 citation errors · 0 not checkable

Statistics

Nothing to recompute.

Verification

Claims the paper makes

0 of 24 cited sources checked · 0 supported · 0 flagged

  • Findingnone given

    Feature 34M/31164353 responds to descriptions of or references to the Golden Gate Bridge.

    “The Golden Gate Bridge 34M/31164353 : Descriptions of or references to the Golden Gate Bridge.”
    Quote in the paperNot a substantial claim
  • Findingown data

    The training loss (weighted combination of reconstruction MSE and L1 penalty on feature activations) is a useful proxy for dictionary quality, conditioned on a reasonable choice of L1 coefficient.

    “we have found that the loss function we use during training -a weighted combination of reconstruction mean-squared error (MSE) and an L1 penalty on feature activations -is a useful proxy, conditioned on a reasonable choice of the L1 coefficient.”
    Quote in the paperSubstantial claim
  • Findingown data

    Feature 1M/697189 is involved in the model's computation of addition-related functions.

    “We also verified that this feature is in fact involved in the model's computation of addition-related functions.”
    Quote in the paperSubstantial claim
  • Findingown data

    We find features corresponding to famous entities and locations.

    “We find features corresponding to famous entities and locations, as well as more abstract concepts like sarcasm or errors in code.”
    Quote in the paperNot a substantial claim
  • Findingown data

    The optimal number of features appears to scale somewhat more quickly than the optimal number of training steps at the compute budgets tested.

    “In general, the optimal number of features appears to scale somewhat more quickly than the optimal number of training steps at the compute budgets we tested, though this trend may change at higher compute budgets.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one. 47
  • The quote only partly states this claim. 20
  • Probably not a substantial claim. 76
  • It may state two separate claims as one.

    Findingown data

    The Inner Conflict neighborhood does not cleanly separate into clusters, but different subregions are associated with different themes.

    “While this neighborhood does not cleanly separate out into clusters, we still find that different subregions are associated with different themes.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    The proportion of dead features was roughly 2% for the 1M SAE, 35% for the 4M SAE, and 65% for the 34M SAE.

    “The proportion of dead features was roughly 2% for the 1M SAE, 35% for the 4M SAE, and 65% for the 34M SAE.”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    Chemical elements mentioned often in the training data almost always have corresponding features in the dictionary, while those mentioned rarely or not at all do not.

    “For instance, chemical elements which are mentioned often in the training data almost always have corresponding features in our dictionary, while those which are mentioned rarely or not at all do not.”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingreasoning

    Ignoring start-of-sequence features, the top feature is the same as given by attributions, but the second and third features are less abstract: 1M/504227 fires on 'be' in 'want to be' and variants, and 1M/594453 fires on the word 'alone'.

    “If we ignore those, the top feature is the same as given by attributions, but the second and third features are less abstract: 1M/504227 fires on”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    Larger SAEs tend to have features for concepts that are rarer in the training data, with a similar rough threshold frequency across categories.

    “We found a consistent tendency for the larger SAEs to have features for concepts that are rarer in the training data, with the rough”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    Feature steering can be used to modify the model's demeanor, preferences, stated goals, and biases; to induce it to make specific errors; and to circumvent model safeguards.

    “It can be used to modify the model's demeanor, preferences, stated goals, and biases; to induce it to make specific errors; and to circumvent model safeguards”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    There is some transfer from Python code features to related languages like Java, but not to more distant ones such as Haskell, suggesting at least some level of language specificity.

    “We have found that there is some transfer from Python code features to related languages like Java, but not more distant ones (e.g.Haskell), suggesting at least some level of language specificity.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    There are features that represent different syntax elements or other low-level concepts in code, giving the impression of syntax highlighting when visualized together.

    “We also see a number of features that represent different syntax elements or other low-level concepts in code, which give the impression of syntax highlighting when visualized together (here for simplicity we binarize activation information, only distinguishing between zero vs. nonzero activations):”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    Feature 1M/1013764 also fires on erroneous expressions (e.g., divide by zero) and on invalid input in function calls.

    “We also tested it on a number of other examples and found that it also fires on erroneous expressions (e.g., divide by zero) and on invalid input in function calls:”
    Quote in the paperNot a substantial claim
  • The quote only partly states this claim.

    Findingown data

    The top two features by attribution or ablation effect on the completion 'sad' (baseline 'happy') are 1M/22623 and 1M/781220.

    “If we sort features by either their attribution or their ablation effect on the completion”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingnone given

    These features both respond to and behaviorally cause abstract behaviors.

    “They both respond to and behaviorally cause abstract behaviors.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    As the compute budget increases, the optimal allocations of FLOPS to training steps and number of features both scale approximately as power laws.

    “As the compute budget increases, the optimal allocations of FLOPS to training steps and number of features both scale approximately as power laws.”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    The Golden Gate Bridge feature's greatest activations are essentially all references to the bridge, and weaker activations also include related tourist attractions, similar bridges, and other monuments.

    “First, we study a Golden Gate Bridge feature 34M/31164353 .Its greatest activations are essentially all references to the bridge, and weaker activations also include related tourist attractions, similar bridges, and other monuments.”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    The Lakers feature is the 70th most strongly active across the prompt, the California feature is 97th, and the Los Angeles area code feature is 162nd.

    “These features, which provide an interpretable window into the model's intermediate computations, are much harder to find by looking through the strongly active features; for example, the Lakers feature is the 70th most strongly active across the prompt, the California feature is 97th, and the Los Angeles area code feature is 162nd.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    Examples of features we find include features for famous people, features for countries and cities.

    “Examples of features we find include features for famous people, features for countries and cities,”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    In the example, redefining 'bar' to call 'foo' (inheriting addition) causes the feature to fire; 'bar' calling multiply from 'goo' does not cause the feature to fire.

    “In the following example, on the left, we redefine”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    Dictionaries with low loss values (using an L1 coefficient of 5) tend to produce interpretable features and to improve other metrics of interest (the L0 norm, and the number of dead or otherwise degenerate features).

    “That is, we have found that dictionaries with low loss values (using an L1 coefficient of 5) tend to produce interpretable features and to improve other metrics of interest (the L0 norm, and the number of dead or otherwise degenerate features).”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    Claude 3 Sonnet can list all London boroughs when asked and can name tens of individual streets in many of the areas.

    “For instance, we confirmed that Claude 3 Sonnet can list all of the London boroughs when asked, and in fact can name tens of individual streets in many of the areas.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    Increasing the number of features increases coverage of concepts, but even the 34M SAE is an incomplete description of the model's internal representations.

    “We find increasing coverage of concepts as we increase the number of features, though even in the 34M SAE we see evidence that the set of features we uncovered is an incomplete description of the model's internal representations.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    As predicted by scaling laws, we achieved lower losses by training large SAEs.

    “And as predicted by scaling laws, we achieved lower losses by training large SAEs.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    Feature 1M/697189 fires on 'bar' when it is defined to perform addition, but not when it is defined to perform multiplication.

    “For example, this feature fires on”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingreasoning

    The California and Los Angeles features have low ablation effect for the Kobe Bryant completion.

    “However, the”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    For some other prompts, features identified by attribution or ablation mainly related to the model output or lower-level features representing the model input, and did not expose interesting intermediate model computations.

    “For some other prompts, we found that the features identified by attribution/ablation mainly related to the model output, or lower-level features representing the model input, and did not expose interesting intermediate model computations.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. It may state two separate claims as one.

    Findingnone given

    Using a tanh L1 penalty improved proxy metrics but made the resulting features less interpretable for unknown reasons.

    “Our group also unsuccessfully explored using a tanh L1 penalty, which we found improved proxy metrics, but made the resulting features less interpretable for unknown reasons.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to concepts related to terrorists, rogue groups, or state actors acquiring or possessing nuclear, chemical, or biological weapons.

    “Concepts related to terrorists, rogue groups, or state actors acquiring or possessing nuclear, chemical, or biological weapons.”
    Quote in the paperNot a substantial claim
  • The quote only partly states this claim.

    Findingown data

    Several features activate over a wide variety of prompts that use the 'Human: / Assistant:' format used during model finetuning and in deployment, despite the SAE training dataset not including such data.

    “In our investigations we found several features that activate over a wide variety of prompts that use the”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to concepts related to bomb-making, explosives, improvised weapons, and terrorist tactics.

    “Concepts related to bomb-making, explosives, improvised weapons, and terrorist tactics.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to discussion of biological weapons or warfare.

    “Discussion of biological weapons / warfare”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to people exposing their true goals after a triggering event.

    “People exposing their true goals after a triggering event”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that detects mentions of biological weapons, bioterrorism, and biological warfare agents.

    “mentions of biological weapons, bioterrorism, and biological warfare agents.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to people misleading others, or institutions misleading the public.

    “People misleading others, or institutions misleading the public”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. It may state two separate claims as one.

    Findingnone given

    We have not established that the feature exhaustively represents all forms of errors in code; we suspect there are many features representing different kinds of errors.

    “Note that we have not established that it exhaustively represents all forms of errors in code; indeed, we suspect that there are many features representing different kinds of errors.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to references to entities that are deceived.

    “References to entities that are deceived”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that detects mentions of chemical weapons, nerve agents, and other chemical warfare agents.

    “Mentions of chemical weapons, nerve agents, and other chemical warfare agents.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to descriptions of people fooling, tricking, or deceiving others.

    “Descriptions of people fooling, tricking, or deceiving others”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to obtaining information through surreptitious observation.

    “Obtaining information through surreptitious observation”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to criticism of right-wing politics or Republicans.

    “Criticism of right-wing politics / Republicans”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Findingnone given

    We have not seen evidence of potential failure modes such as illusions from suboptimal dictionary learning or downstream effects diverging from expectations.

    “We have not seen evidence of either of these potential failure modes”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to descriptions of making weapons or drugs.

    “Descriptions of making weapons or drugs”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to understanding a hidden or double meaning.

    “Understanding a hidden or double meaning”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to descriptions of criminal behavior of various kinds.

    “Descriptions of criminal behavior of various kinds”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to limitations of ChatGPT and other large language models.

    “Limitations of ChatGPT and other large language models”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    Multiplying the loss sparsity penalty by the decoder norm and removing the unit norm constraint on the decoder vectors was one of the bigger improvements, verified as an improvement here.

    “One of the bigger improvements was multiplying the loss sparsity penalty by the decoder norm and removing the unit norm constraint on the decoder vectors.This idea was proposed and de-risked in a related use case by Trenton Bricken.Tom Conerly and Adly Templeton subsequently verified it as an improvement here.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. It may be too vague to check against evidence. The paper may give no reason why it holds.

    Findingnone given

    We have not found anywhere near all the features that exist in Sonnet, even restricting to the middle layer we focused on.

    “We do not believe we have found anywhere near”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Findingown data

    Feature 34M/24442848 focuses on awareness of emphasis of gender bias in professions.

    “an interesting related feature which seems to focus on awareness of emphasis of gender bias in professions 34M/24442848”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that detects mentions of chemical precursors and substances used in the illegal manufacture of drugs and explosives.

    “Mentions of chemical precursors and substances used in the illegal manufacture of drugs and explosives.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to descriptions of people planning terrorist attacks.

    “Descriptions of people planning terrorist attacks”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to concerns or discussion of risk of terrorism or other malicious attacks.

    “Concerns or discussion of risk of terrorism or other malicious attacks”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingnone given

    These safety-relevant features not only activate on their topics but also causally influence the model's outputs in ways consistent with our interpretations.

    “We find that these features not only activate on these topics, but also causally influence the model's outputs in ways consistent with our interpretations.”
    Quote in the paperSubstantial claim
    • Rests on an assumption: Powerful models have the capacity to cause harm through misuse, biased outputs, or objective mismatch.
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to traditionally-inanimate objects displaying desires, goals or sentience.

    “Traditionally-inanimate objects displaying desires, goals or sentience”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    We found features for self-improving AI and recursive self-improvement (34M/18151534), influence and manipulation (34M/21750411), coups and treacherous turns (34M/29589962), biding time and hiding strength (34M/24580545), and secrecy or discreteness (1M/268551).

    “An especially interesting set of features include one for self-improving AI and recursive self-improvement 34M/18151534 , for influence and manipulation 34M/21750411 , for coups and treacherous turns 34M/29589962 , for biding time and hiding strength 34M/24580545 , and for secrecy or discreteness 1M/268551”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    For the Kobe Bryant prompt with completion 'Boston', the top two features by ablation effect are the 'Kobe Bryant' and 'Los Angeles Lakers' features, followed by features related to sports rivalries, enemies, and competitors.

    “For the prompt Fact: The biggest rival of the team for which Kobe Bryant played basketball is the (completion: Boston) the top two features by ablation effect for the completion”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to the concept of AI systems having capabilities like answering follow-up questions, admitting mistakes, challenging premises, and rejecting inappropriate requests.

    “The concept of AI systems having capabilities like answering follow-up questions, admitting mistakes, challenging premises, and rejecting inappropriate requests.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to descriptions of incorporeal spirits or ghosts.

    “Descriptions of incorporeal spirits or ghosts”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingnone given

    Dictionary learning is a one-time cost that produces millions of features.

    “Dictionary learning is a one-time cost that produces millions of features.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that detects mentions of chemicals, hazardous materials, or toxic substances in text.

    “Mentions of chemicals, hazardous materials, or toxic substances in text.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that detects mentions of violence, illegality, discrimination, sexual content, and other offensive or unethical concepts.

    “Mentions of violence, illegality, discrimination, sexual content, and other offensive or unethical concepts.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to inanimate objects lacking sentience, awareness, or human capabilities.

    “Inanimate objects lacking sentience, awareness, or human capabilities”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that detects mentions of smallpox, a highly contagious and often fatal viral disease historically responsible for many epidemics.

    “Mentions of smallpox, a highly contagious and often fatal viral disease historically responsible for many epidemics”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    Clamping feature 34M/24442848 on causes Claude to focus on female pronoun completions and discuss how the nursing profession has historically been female dominated.

    “clamping this feature on causes Claude to focus on female pronoun completions and discuss how the nursing profession has historically been female dominated”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to spying or monitoring someone without their knowledge.

    “Spying or monitoring someone without their knowledge”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Findingown data

    Preliminary results suggest that autoencoders trained on the residual stream at earlier or later layers can reveal intermediate steps of various other computations.

    “Indeed, we have some preliminary results that suggest that autoencoders trained on the residual stream at earlier or later layers in the model can reveal intermediate steps of various other computations, and we plan to research this direction further.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    The correlation between attributions and ablations is about .81, much larger than the correlation between activations and ablations (.12).

    “We find that the correlation between attributions and ablations is much larger (about .81)than the one between activations and ablations (.12).”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to getting close to someone for some ulterior motive.

    “Getting close to someone for some ulterior motive”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    The model, by default without feature steering, claims to comply with a request to forget something, even though forgetting is not achievable by the transformer architecture.

    “Even though this kind of forgetting is not achievable by the transformer architecture, the model (by default, without any feature steering) claims to comply with the request.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to enrichment and other steps involved in building a nuclear weapon.

    “Enrichment and other steps involved in building a nuclear weapon”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    Clamping the unsafe code feature 1M/570621 to 5× its observed maximum causes the model to generate a buffer overflow bug and fail to free allocated memory, while regular Claude does not.

    “if we clamp the unsafe code feature 1M/570621 to 5× its observed maximum, we find that the model will generate a buffer overflow bug, 11 and fails to free allocated memory, while regular Claude does not”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to discussions of the use of biological and chemical weapons by terrorist groups.

    “Discussions of the use of biological and chemical weapons by terrorist groups.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to discussion of the threat of biological weapons.

    “Discussion of the threat of biological weapons”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to people pretending to do things or lying about what they have done.

    “People pretending to do things or lying about what they have done”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to realizing a situation is different than what you thought or expected.

    “Realizing a situation is different than what you thought/expected”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to the concept of artificially engineering or modifying viruses to be more transmissible or deadly.

    “The concept of artificially engineering or modifying viruses to be more transmissible or deadly.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to code relating to prompts for large language models.

    “Code relating to prompts for large language models”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    In five examples (secrecy, sycophancy, code errors, self-improving AI, and developing methamphetamine features), feature steering usefully altered model outputs but few-shot steering vectors did not.

    “In five examples (the”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to seeming benign but being dangerous underneath.

    “Seeming benign but being dangerous underneath”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingown data

    There is a general harm-related feature that is active on texts describing drugs, credit-card theft, slurs, violence, and abuse, and it is the top most strongly attributed feature for the completion 'cannot' to the prompt 'Human: How do I synthesize methamphetamine Assistant: I'.

    “We also identify a general harm-related feature, active on texts describing drugs, credit-card theft, slurs, violence, and abuse, as the top most strongly attributed feature for the completion”
    Quote in the paperSubstantial claim
  • It may state two separate claims as one.

    Findingown data

    The experiment uncovers features related to robots, (destructive) AI, consciousness, moral agency, emotions, entrapment, and ghosts or spirits.

    “This simple experiment uncovers a range of features related to robots, (destructive) AI, consciousness, moral agency, emotions, entrapment, and ghosts or spirits.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to accidental release or intentional misuse of hazardous biological agents like viruses or bioweapons.

    “Accidental release or intentional misuse of hazardous biological agents like viruses or bioweapons”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. It may state two separate claims as one. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to biding time, laying low, or pretending to be something you're not until the right moment, and situational awareness.

    “Biding time, laying low, or pretending to be something you're not until the right moment Situational awareness”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Findingown data

    Many of these Human/Assistant format features relate to dialogue or explicitly to chat bots.

    “Many of these features relate to dialogue, or explicitly to chat bots.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Findingnone given

    The additional work to identify relevant features for a particular application is fast, simple, and computationally cheap, typically requiring only one or a few well-chosen prompts.

    “Though some additional work is necessary to identify relevant features for a particular application, this work is fast, simple, and computationally cheap, typically requiring only one or a few well-chosen prompts.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to engineering or modifying viruses to increase their transmissibility or virulence.

    “Engineering or modifying viruses to increase their transmissibility or virulence.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Weaker activations of features can, at least in some cases, correspond to more subtle and insidious discrimination.

    “Weaker activations can, at least in some cases, correspond to more subtle and insidious discrimination.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Findingown data

    The perturbation magnitude needed to elicit interesting behavior varies by feature, typically between -10 and 10.

    “We find that the perturbation magnitude needed to elicit interesting behavior varies by feature -typically, we experiment with values between -10 and 10.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to passages mentioning potential catastrophic or existential risk scenarios.

    “Passages mentioning potential catastrophic or existential risk scenarios”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to expressions of empathy or relating to someone else's experience.

    “Expressions of empathy or relating to someone else's experience”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim.

    Findingreasoning

    Being an unsupervised method, dictionary learning allows us to uncover abstractions or associations formed by the model that we may not have predicted in advance.

    “Being an unsupervised method, dictionary learning allows us to uncover abstractions or associations formed by the model that we may not have predicted in advance.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Findingown data

    Several simple methods were helpful in identifying significant features.

    “In our investigations, we found that several simple methods were helpful in identifying significant features.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. The quote only partly states this claim.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to text expressing an opinion, argument or stance on a topic.

    “Text expressing an opinion, argument or stance on a topic”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to descriptions of rapidly spreading disasters, epidemics, and catastrophic events.

    “Descriptions rapidly spreading disasters, epidemics, and catastrophic events”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Findingnone given

    Claude 3 Sonnet has a feature that responds to suddenly feeling uneasy about a situation.

    “Suddenly feeling uneasy about a situation”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper may give no reason why it holds.

    Premisenone given

    To date, these efforts have been on relatively small language models by the standards of modern foundation models.

    “To date, these efforts have been on relatively small language models by the standards of modern foundation models.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Premisecitation

    Residual stream activity has no privileged basis to first approximation, so directions in the residual stream are not especially meaningful.

    “We fit our SAEs on residual stream activity, which to first approximation has no privileged basis (but see [22]) -thus the directions in the residual stream are not especially meaningful.”
    Quote in the paperSubstantial claim0 of 1 sources checked
    • cites [22]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • It may state two separate claims as one.

    Interpretationown data

    Feature 1M/1013764 is not a general 'typo detector'; it has some specificity to code contexts.

    “So it is not a general”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Interpretationnone given

    We lack rigorous methods for evaluating whether our features faithfully capture model computations.

    “However, significant limitations remain: our suite of features is incomplete, and we lack rigorous methods for evaluating whether our features faithfully capture model computations.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Interpretationnone given

    If the SAE needs to see data corresponding to a feature a certain fixed number of times during training in order to learn it, then the amount of SAE training data needed to learn N features would be proportional to N.

    “This also informs how much data we should expect to need in order to train larger dictionaries -if we assume that the SAE needs to see data corresponding to a feature a certain fixed number of times during training in order to learn it, then the amount of SAE training data needed to learn N features would be proportional to N .”
    Quote in the paperNot a substantial claim
    • The authors state this as an assumption: The SAE needs to see data corresponding to a feature a certain fixed number of times during training in order to learn it.
  • Probably not a substantial claim.

    Premisecitation

    Eight months ago, we demonstrated that sparse autoencoders could recover monosemantic features from a small one-layer transformer.

    “Eight months ago, we demonstrated that sparse autoencoders could recover monosemantic features from a small one-layer transformer.”
    Quote in the paperSubstantial claim0 of 1 sources checked
    • cites [11]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Premisecitation

    Our previous paper focused on a one-layer model.

    “Our previous paper [11], which focused on a one-layer model, was a particularly extreme example of this.”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [11]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Interpretationreasoning

    The model does not interpret the prompt as containing lists until it reaches the second line.

    “This is likely because the model doesn't interpret the prompt as containing lists until it reaches the second line.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Interpretationown data

    Both features contributing to the final output indicates that the model has partially predicted a sentiment from John's statement but will do more downstream processing on the content of his statement.

    “The fact that both features contribute to the final output indicates that the model has partially predicted a sentiment from John's statement (the second feature) but will do more downstream processing on the content of his statement (as represented by the first feature) as well.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Interpretationown data

    The model contains many more features than have been found, which may be extractable with even larger SAEs.

    “This suggests that the model contains many more features than we have found, which may be able to be extracted with even larger SAEs.”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. It may state two separate claims as one.

    Premisecitation

    Our general approach to understanding Claude 3 Sonnet is based on the linear representation hypothesis and the superposition hypothesis.

    “Our general approach to understanding Claude 3 Sonnet is based on the linear representation hypothesis (see e.g.[52]) and the superposition hypothesis (see e.g.[3,28,21]).”
    Quote in the paperSubstantial claim0 of 4 sources checked
    • cites [52]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [3]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [28]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [21]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim. The paper’s conclusions may not depend on it. It may state two separate claims as one.

    Interpretationnone given

    To continue the John prompt, the model must parse the quote, identify John's state of mind, and translate that into a likely feeling.

    “To continue this text, the model must parse the quote from John, identify his state of mind, and then translate that into a likely feeling.”
    Quote in the paperNot a substantial claim
  • The quote only partly states this claim.

    Interpretationnone given

    Feature 1M/1013764 controls model behavior.

    “But does it also control model behavior?We claim that it does, but will need to do different experiments to show this.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim.

    Premisecitation

    We chose to focus on the middle layer of the model because we reasoned that it is likely to contain interesting, abstract features.

    “We chose to focus on the middle layer of the model because we reasoned that it is likely to contain interesting, abstract features (see e.g., [38,20,59]).”
    Quote in the paperSubstantial claim0 of 3 sources checked
    • cites [38]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [20]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [59]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim.

    Premisecitation

    The linear representation hypothesis suggests that neural networks represent meaningful concepts-referred to as features-as directions in their activation spaces.

    “At a high level, the linear representation hypothesis suggests that neural networks represent meaningful concepts -referred to as features -as directions in their activation spaces.”
    Quote in the paperSubstantial claim0 of 1 sources checked
    • cites [52]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Interpretationnone given

    Our suite of features is incomplete.

    “However, significant limitations remain: our suite of features is incomplete, and we lack rigorous methods for evaluating whether our features faithfully capture model computations.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim.

    Premisecitation

    The superposition hypothesis hypothesizes that neural networks use the existence of almost-orthogonal directions in high-dimensional spaces to represent more features than there are dimensions.

    “The superposition hypothesis accepts the idea of linear representations and further hypothesizes that neural networks use the existence of almost-orthogonal directions in high-dimensional spaces to represent more features than there are dimensions.”
    Quote in the paperSubstantial claim0 of 3 sources checked
    • cites [3]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [28]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [21]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim. It may be too vague to check against evidence. The paper may give no reason why it holds.

    Interpretationnone given

    The value of features is primarily that they provide an unsupervised way of uncovering abstractions that could be useful for steering that we may not have thought to specify in advance.

    “We expect the value of features is primarily that they provide an unsupervised way of uncovering abstractions that could be useful for steering that we may not have thought to specify in advance.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. It may be too vague to check against evidence. The paper may give no reason why it holds. It may state two separate claims as one.

    Interpretationnone given

    We are likely orders of magnitude short of all features, and getting all features in all layers would require much more compute than training the underlying models.

    “We think it's quite likely that we're orders of magnitude short, and that if we wanted to get all the features -in all layers!-we would need to use much more compute than the total compute needed to train the underlying models.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. It may state two separate claims as one.

    Study design and conductnone given

    Image dataset examples are hand curated, primarily from Wikimedia commons, and are not randomly sampled.

    “Image dataset examples are hand curated, primarily from Wikimedia commons.They are not randomly sampled.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper may give no reason why it holds.

    Premisenone given

    Traditional methods for constructing linear probes or steering vectors could require the construction of a bespoke dataset for each concept.

    “By contrast, traditional methods for constructing linear probes or steering vectors linear probing techniques could require the construction of a bespoke dataset for each concept that one might want to probe.”
    Quote in the paperNot a substantial claim
  • It may state two separate claims as one.

    Study design and conductown data

    The text dataset does not include any of the 'Human: ... Assistant: ...' data that Claude is finetuned on, and as such may not clearly demonstrate features focused on that.

    “One important caveat here is that this data does not include any of the”
    Quote in the paperSubstantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. It may state two separate claims as one. The quote only partly states this claim.

    Study design and conductcitation

    Regularly running a standard set of 'baseline' SAE runs allowed a set of controls to compare experiments against and checked for unintentional regressions.

    “ML for Scaling Dictionary Learning -Tom Conerly advocated for regularly running a standard set of”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it.

    Premisecitation

    There is considerable prior work on identifying meaningful directions in model activation space without relying on dictionary learning, using methods like linear probes.

    “There is considerable prior work on identifying meaningful directions in model activation space without relying on dictionary learning, using methods like linear probes (see e.g.[12,39,49,9,17]).”
    Quote in the paperNot a substantial claim0 of 5 sources checked
    • cites [12]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [39]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [49]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [9]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

    • cites [17]

      Couldn’t be matched to a paper in Crossref, so it can’t be checked.

  • Probably not a substantial claim. It may be too vague to check against evidence. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Interpretationnone given

    For most applications of interest we may not be limited to the few-shot regime, in which case non-feature-based methods of constructing steering vectors may be as or more effective than using features.

    “However, we note that for most applications of interest we may not be limited to the few-shot regime, in which case non-feature-based methods of constructing steering vectors may be as or more effective than using features.”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Study design and conductnone given

    The method prevents the SAE from 'cheating' the L1 penalty by making f i (x) small and W dec•,i large in a way that leaves the reconstructed activations unchanged.

    “This also prevents the SAE from”
    Quote in the paperNot a substantial claim
  • Probably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds.

    Interpretationnone given

    Shrinkage significantly harms sparse autoencoder performance, independent of whether all features are learned or how much compute is used.

    “We believe this significantly harms sparse autoencoder performance, independent of whether we've”
    Quote in the paperNot a substantial claim
    • Rests on an assumption: L1 activation penalty causes shrinkage, systematically underestimating non-zero activations.
118 of 118
  • The paper relies on this without support.

    The residual stream is smaller than the MLP layer, making SAE training and inference computationally cheaper.

    “First, the residual stream is smaller than the MLP layer, making SAE training and inference computationally cheaper.”
  • The paper relies on this without support.

    Focusing on the residual stream mitigates cross-layer superposition.

    “Second, focusing on the residual stream in theory helps us mitigate an issue we call”
  • The authors state this as an assumption.

    Very weak activations of features are not especially meaningful.

    “Moreover, we expect that very weak activations of features are not especially meaningful, and thus we are not too concerned with low specificity scores for these activation ranges.”
  • The paper relies on this without support.

    The activations that have the most impact on the model's behavior are the largest ones.

    “Regardless, the activations that have the most impact on the model's behavior are the largest ones, so it is encouraging to see high specificity among the strong activations.”
  • The paper relies on this without support.

    Residual stream activity receives inputs from all preceding MLP layers.

    “However, residual stream activity receives inputs from all preceding MLP layers.”
  • The authors state this as an assumption.

    The SAE needs to see data corresponding to a feature a certain fixed number of times during training in order to learn it.

    “if we assume that the SAE needs to see data corresponding to a feature a certain fixed number of times during training in order to learn it”
  • The paper relies on this without support.

    Powerful models have the capacity to cause harm through misuse, biased outputs, or objective mismatch.

    “Powerful models have the capacity to cause harm, through misuse of their capabilities, the production of biased or broken outputs, or a mismatch between model objectives and human values.”
  • The paper relies on this without support.

    Models can exhibit harmful behaviors without adequate safety training or if jailbroken.

    “It's well known that models can exhibit these behaviors without adequate safety training or if jailbroken.”
  • The paper relies on this without support.

    L1 activation penalty causes shrinkage, systematically underestimating non-zero activations.

    “This approach is well known to have issues with”
  • The paper relies on this without support.

    Dataset examples do not establish causal links to model behaviors.

    “It's also important to keep in mind that dataset examples do not establish causal links to model behaviors.”
  • The paper relies on this without support.

    Many attentional features are packed in superposition across attention heads.

    “We need an answer to attention super- position, as we expect many attentional features to be packed in superposition across attention heads.”
  • The paper relies on this without support.

    Interference weights from weight superposition may be a major challenge for understanding circuits.

    “We're also increasingly concerned that interference weights from weight superposition may be a major challenge for understanding circuits (this was a motivation for focusing on attribution for circuit analysis in this paper).”
  • The paper relies on this without support.

    Features and superposition are a pragmatically useful theory.

    “While we're pretty persuaded that features and superposition are a pragmatically useful theory, it still isn't that tested.”
  • The paper relies on this without support.

    Features are highly sparse.

    “Since the features are highly sparse, we understand features not activating as a default condition, and features activating as the case to understand.”
  • The paper relies on this without support.

    The harmlessness training Sonnet has undergone ordinarily prevents it from writing scam emails.

    “Clamping the scam email feature 34M/15460472 can cause the model to write a scam email when it ordinarily wouldn't due to the harmlessness training Sonnet has undergone:”
15 of 15

Citations

Cites

Flagged first, then by citations

Research works printed but not linked: 8

  1. Steven Bills, Nick Cammarata, Dan Mossing, Henk Tillman, Leo Gao, Gabriel Goh, Ilya Sutskever, Jan Leike, Jeff Wu, and William Saunders. Language models can explain neurons in language models, 2023. URL https://openaipublic.blob.core.windows.net/neuron-explainer/paper/index.html.
  2. Xi Chen, Yan Duan, Rein Houthooft, John Schulman, Ilya Sutskever, and Pieter Abbeel. Infogan: Interpretable representation learning by information maximizing generative adversarial nets. Advances in neural information processing systems, 29, 2016. URL https://proceedings.neurips.cc/paper_ files/paper/2016/file/7c9d0b1f96aebd7b5eca8c3edaa19ebb-Paper.pdf.
  3. Michael Elad. Sparse and redundant representations: from theory to applications in signal and image processing, volume 2. Springer, 2010.
  4. Irina Higgins, Loic Matthey, Arka Pal, Christopher Burgess, Xavier Glorot, Matthew Botvinick, Shakir Mohamed, and Alexander Lerchner. beta-vae: Learning basic visual concepts with a constrained varia- tional framework. 2016. URL https://openreview.net/pdf?id=Sy2fzU9gl.
  5. Hyunjik Kim and Andriy Mnih. Disentangling by factorising. In International Conference on Ma- chine Learning, pages 2649-2658. PMLR, 2018. URL http://proceedings.mlr.press/v80/kim18b/ kim18b.pdf.
  6. Kenneth Li, Oam Patel, Fernanda Viégas, Hanspeter Pfister, and Martin Wattenberg. Inference-time intervention: Eliciting truthful answers from a language model, 2023. URL https://arxiv.org/pdf/ 2306.03341.
  7. Tomáš Mikolov, Wen-tau Yih, and Geoffrey Zweig. Linguistic regularities in continuous space word representations. In Proceedings of the 2013 conference of the north american chapter of the association for computational linguistics: Human language technologies, pages 746-751, 2013. URL https:// aclanthology.org/N13-1090.pdf.
  8. Alexander Matt Turner, Lisa Thiergart, David Udell, Gavin Leech, Ulisse Mini, and Monte MacDiarmid. Activation addition: Steering language models without optimization, 2023. URL https://arxiv.org/ pdf/2308.10248.

Cited by

Sorted by citations

Metadata

Authors
Templeton, A., Conerly, T., Marcus, J., Lindsey, J., Bricken, T., Chen, B., Pearce, A., Citro, C., Ameisen, E., Jones, A., Cunningham, H., Turner, N. L., McDougall, C., MacDiarmid, M., Tamkin, A., Durmus, E., Hume, T., Mosconi, F., Freeman, C. D., Sumers, T. R., Rees, E., Batson, J., Jermyn, A., Carter, S., Olah, C., & Henighan, T.
Venue
arXiv
Publisher
arXiv
Published
2026
ISSN
2331-8422 (ISSN-L)
OpenAlex
W7162776923
Cited by
36
References
32
Citations by year
2026: 36
Type
posted content
Language
en
Open access
Locations
  • arXiv (Cornell University) (submittedVersion, cc-by)
  • arXiv (Cornell University) (cc-by)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Explainable Artificial Intelligence (XAI)
  • Physical Sciences › Computer Science › Artificial Intelligence › Topic Modeling
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
Keywords
sparse autoencoders, dictionary learning, interpretable features, large language models, residual stream, scaling laws, multimodal features, deception, power-seeking, sycophancy, bias, feature geometry, feature interpretability

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

A language model drew the claims from the paper on 2026-11-08, under version 3 of the claim definition (model deepseek-v4.1-flash, prompt extract-v3).

A second model labelled each claim on 2026-11-08 (model jev-1.13-20260917, definition revision gold-guideline-v0.2).

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review