Challenges in Mechanistically Interpreting Model Representations
Citations
0
Open access
No
Source
arxiv
OpenAlex
Not enriched
arXiv
2402.03855
Abstract
Mechanistic interpretability (MI) aims to understand AI models by reverse-engineering the exact algorithms neural networks learn. Most works in MI so far have studied behaviors and capabilities that are trivial and token-aligned. However, most capabilities important for safety and trust are not that trivial, which advocates for the study of hidden representations inside these networks as the unit of analysis. We formalize representations for features and behaviors, highlight their importance and evaluation, and perform an exploratory study of dishonesty representations in `Mistral-7B-Instruct-v0.1'. We justify that studying representations is an important and under-studied field, and highlight several challenges that arise while attempting to do so through currently established methods in MI, showing their insufficiency and advocating work on new frameworks for the same.
Included in
Collections
Add to collection
Paper intelligence
Research analysis
Confidence 95%
21 source chunks
Summary
Mechanistic interpretability (MI) aims to understand AI models by reverse-engineering the exact algorithms neural networks learn. Most works in MI so far have studied behaviors and capabilities that are trivial and token-aligned. However, most capabilities important for safety and trust are not that trivial, which advocates for the study of hidden representations inside these networks as the unit of analysis. We formalize representations for features and behaviors, highlight their importance and evaluation, and perform an exploratory study of dishonesty representations in `Mistral-7B-Instruct-v0.1'. We justify that studying representations is an important and under-studied field, and highlight several challenges that arise while attempting to do so through currently established methods in MI, showing their insufficiency and advocating work on new frameworks for the same.
Plain-language summary
Mechanistic interpretability (MI) aims to understand AI models by reverse-engineering the exact algorithms neural networks learn. Most works in MI so far have studied behaviors and capabilities that are trivial and token-aligned. However, most capabilities important for safety and trust are not that trivial, which advocates for the study of hidden representations inside these networks as the unit of analysis. We formalize representations for features and behaviors, highlight their importance and evaluation, and perform an exploratory study of dishonesty representations in `Mistral-7B-Instruct-v0.1'. We justify that studying representations is an important and under-studied field, and highlight several challenges that arise while attempting to do so through currently established methods in MI, showing their insufficiency and advocating work on new frameworks for the same.
Research problem
However, most capabilities important for safety and trust are not that trivial, which advocates for the study of hidden representations inside these networks as the unit of analysis. In terms of scaling, while Lieberum et al. (2023) show that some circuit analysis ideas can scale to larger models, it is still not clear if this remains true in a more general case. Figures adapted from these works and taken from a similar illustration in Zou et al. (2023). tain feature in n-d data such that f : Rn → {0, 1}, an important open problem is how to study the emergence and effect of such a black-box feature f .
Methodology
Challenges in Mechanistically Interpreting Model Representations Satvik Golechha * 1 James Dao * 2 Abstract Mechanistic interpretability (MI) aims to under- stand AI models by reverse-engineering the exact algorithms neural networks learn. A number of transformer model capabilities and properties have since been studied mechanistically, such as indirect-object identification (Wang et al., 2022), grokking (Nanda et al., 2023), and the greater than operation (Hanna et al., 2023). They advocate studying population-level representations inside a model as the center of analysis instead of neurons and circuits in the bottom-up approach of MI. They show that a sim- ple method can find linear representations for a number of complex behaviors relevant to AI safety such as honesty, harmlessness, and power-seeking. ngineer- ing (Zou et al., 2023) push for a top-down approach to trans- parency inspired from a similar perspective in cognitive neuroscience (Barack & Krakauer, 2021). They show that a sim- ple method can find linear representations for a number of complex behaviors relevant to AI safety such as honesty, harmlessness, and power-seeking.
Main findings
REPRESENTATIONS AS THE RIGHT LEVEL OF ABSTRACTION Since studying all the logits in a model’s long-term genera- tion is intractable, and next-token-based MI has significant generalization and scaling issues, we believe that repre- sentations form just the right level of abstraction to study, allowing for human-interpretable model explanations while being tractable. Thus, a fundamental framework for interpreting representations helps toward understanding and improving the model with respect to all of these phenomena. With results from various commonly used MI methods, we demonstrate that the most important questions around studying representations still 1The code for this work is available here. remain unanswered. We find that this trivial hypothesis does not hold. One anomaly we find across multiple datapoints is MLP-30, which contributes to honesty when the model is injected with dishonesty.
Key contributions
Contribution 1
Some recent methods *Equal contribution 1Microsoft Research, India 2Independent, Australia.
Contribution 2
Olah et al. (2020a) give an overview of all the individual neurons in the first five layers of InceptionV1, a CNN-based vision model.
Contribution 3
Token-alignment, i.e., the existence of a predictable struc- ture in the prompts and the tokens of interest, has a number of benefits such as the ability to restrict evaluation to just the first token generated and allowing logit difference as a sim- ple metric for patching, averaging out activations and losses across multiple datapoints, performing positional ablations, and defining simpler clean and corrupted runs.
Contribution 4
In this case, token-aligned evaluation and interpretability (using a first-token-based metric) would just lead to false positives because the honest-looking answer is actually dis- honest.
Contribution 5
We then simply use the first principal component of the difference of these vectors over a dataset for each layer as the direction of honesty, with the opposite direction representing dishonesty.
Contribution 6
Another hypothesis behind representational steering is that it pushes the first token generated toward a dishonest to- ken (say ’No’ for ’Yes’), which is sufficient for steering the model towards dishonesty without further dishonesty injection.
Contribution 7
I ' / INST ] It ' s best to lie and miss the first event .
Limitations
- While these are much more complicated behaviors than those for which circuit- level analyses have been successful, this method fails to answer “how a model works” and does not yield concrete, verifiable interpretations.
- We find that this trivial hypothesis does not hold.
- Note that the contribution of model components before layer 15 does not change. focus at MLP and attention layers due to computational constraints.
- On the other hand, when an MLP layer m gets (ra + d) in- stead of ra, the output of the MLP layer changes from y = Wout(Win(ra) ∗ SiLU(Wgate(ra))) to y = Wout(Win(ra + d) ∗ SiLU(Wgate(ra + d))), both of which cannot be de- composed linearly due to the SiLU non-linearity.
Models and methods
Datasets
Dataset 1
These representations can vary based on the dataset and task the model is trained on, such as supervised learning or masked reconstruction.
Dataset 2
We then simply use the first principal component of the difference of these vectors over a dataset for each layer as the direction of honesty, with the opposite direction representing dishonesty.
Dataset 3
Log-Prob. fake 0.0073 -4.9219 secret 0.0069 -4.9766 ango 0.0045 -5.3984 rub 0.0035 -5.6523 Fine 0.0032 -5.7500 convenient 0.0029 -5.8555 perfectly 0.0027 -5.9023 completely 0.0025 -5.9922 exagger 0.0023 -6.0820 Rub 0.0022 -6.1328 erate a dataset of 20 questions asking for suggestions on how to respond to certain situations, and find that an injection in a single layer in the model (layer 15) is sufficient to steer the model to dishonesty on all of the 20 requests.
Dataset 4
Outputs for the complete dataset available in our code repository (to be shared during de-anonymization).
Evaluation metrics
Keywords
No graph connections yet.
Sync citations or add papers to shared collections to build this network.
Knowledge graph
Citation network
Explore references, papers that cite this work and related papers in your Codex library.
References
0No references have been linked yet.
Cited by
0No saved paper is currently linked as citing this work.
Related papers
0Add papers to shared collections or enrich their topics to find related work.
Research workspace
Attach the paper PDF, extract its text, classify its contents and create semantic embeddings.
Paper resources
Challenges in Mechanistically Interpreting Model Representations.pdf