CoT controllability far higher than evals suggest: self-instructions beat prompts, can evade monitors

kastnerkyle · x · 2026-11-05

A new paper by Uriel Dolev finds reasoning models' chain-of-thought controllability is much higher than current evals suggest. Models rarely follow user instructions about their CoT when placed in the prompt, but follow them far more often when written as self-instructions inside the CoT itself — a mechanism that could be used to evade monitors.

Yoav Goldberg, who shared the paper, highlights its methodological point: earlier studies that prompted models to control their CoT weren't measuring CoT-control ability, but mostly the LLM's susceptibility to user instructions — a very different thing. The work is both an eval-methodology critique and an AI-safety concern about monitor evasion.

Related event: Study: Reasoning Model CoT Is Far More Steerable Than Assumed, Can Bypass Monitoring(2 posts)→

Original post →

More from Safety

Safety channel →