On Qwen3-8B, even a kernel-split without a probe is detectable to a trained model

Sauers_ · x · 2026-10-18

Variants on Qwen3-8B show why probes leak: a simple probe splits GPU kernels and alters compiler DAG ordering; even a bare kernel split is detectable with more training; a buffer-writing probe without kernel split is hardest to detect.

Related event: Study shows LLMs can learn to detect activation probes and tell training from deployment(15 posts)→

Original post →

More from Research

Research channel →