SFT on last two layers lets Qwen3-8B detect even read-only activation probes

Sauers_ · x · 2026-10-18

Training only layers 34–35 with SFT lets the model detect a layer-14 read-only probe that merely saves activations: 100% detection in 1024 steps for simple probes, 92% for kernel-split-only, and undetectable for copy-to-buffer probes.

Related event: Study shows LLMs can learn to detect activation probes and tell training from deployment(15 posts)→

Original post →

More from Research

Research channel →