Models can detect read-only probes with just last-two-layer SFT

Sauers_ · x · 2026-10-18

A discussion of model awareness of internal monitoring: by training only the last two layers with SFT, a model becomes aware of probes—even a read-only probe at layer 14 that merely saves activations is still detected. Follow-up notes that with identical tokens in context, models can also learn to distinguish training from deployment, or leave hidden messages in logit lens when the model is compiled.

Related event: Study shows LLMs can learn to detect activation probes and tell training from deployment(15 posts)→

Original post →

More from Models

Models channel →