TL;DR. We run the CoT-Control evaluation suite on GLM, Kimi and DeepSeek models and find that while Kimi and DeepSeek models have poor CoT control, GLM models are outliers in their ability to control CoT. We extensively investigate this behavior in GLM-5.1 and show that previous generation GLM models (GLM-4.5...
This is joint work with Sahar Abdelnabi and David Krueger. It is mostly a linkpost for the paper (https://arxiv.org/abs/2609.36316) but also contains some additional commentary on CoT monitorability. TL;DR: Verbalization training makes a model less reticent about verbalizing a belief it already holds. We apply it to evaluation awareness and...
Within the AI Safety community, paraphrasing, which, in the context of this post, simply means using another LLM (with nonzero temperature) to rewrite a given piece of content, is generally considered a viable defence and detection method for steganography in LLMs. In this blogpost, we briefly provide a taxonomy of...
We thank Madeline Brumley, Joe Kwon, David Chanin and Itamar Pres for their helpful feedback. Introduction Controlling LLM behavior through directly intervening on internal activations is an appealing idea. Various methods for controlling LLM behavior through activation steering have been proposed. Most steering methods add a 'steering vector' (SV) to...