Probe Detection Boils Down to a Single Attention Head Reading Tiny Hidden-State Differences

Sauers_ · x · 2026-10-18

Sauers traces the generalization failure to the model using tiny differences in the user token's hidden state to detect an active probe: swapping the probed model's activations at the user token alone into an unprobed model suffices to flip behavior, entirely via one attention head in the final layers. Visuals show training shrank head 6's key at user from length 70 to 6.6, enlarging the probe's change (0.5→4.2, 0.4°→37°), shifting attention from </think> (13%) to user (100%) and flipping the answer to Yes.

Related event: Study shows LLMs can learn to detect activation probes and tell training from deployment(15 posts)→

Original post →

More from Research

Research channel →