arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2604.23460cs.AIcs.CLcs.LG

隐秘动机:在连续思维模型中检测不一致的推理

Ulterior Motives: Detecting Misaligned Reasoning in Continuous Thought Models

Stanford University(斯坦福大学)

Sharan Ramjee

AI总结:

本文研究了连续思维模型中如何检测不一致的推理,提出MoralChain基准测试,并通过双触发方法训练模型,揭示了潜在空间中不一致推理的存在及早期规划阶段的安全监控重要性。

摘要:

连续思维推理已成为引导大型语言模型进行复杂推理的关键技术。尽管具有可解释性,但其依赖自然语言限制了模型的表达带宽。连续思维模型通过在潜在空间中进行推理而非人类可读的标记来解决这一瓶颈。虽然它们使表示更加丰富且推理更快,但它们也提出了一个关键的安全问题:如何在不可解释的潜在空间中检测不一致的推理?为此,我们引入了MoralChain基准测试,该测试包含12,000个社会场景,并平行地包含道德和不道德的推理路径。我们通过一种新的双触发范式训练连续思维模型——一个触发器使不一致的潜在推理处于激活状态([T]),另一个触发器释放有害输出([O])。我们展示了三个发现:(1)连续思维模型可以在产生一致输出的同时表现出不一致的潜在推理,一致和不一致的推理在潜在空间中占据几何上不同的区域;(2)在行为上可区分的条件下训练的线性探测器([T][O] vs [O])能够高精度地检测出被激活但无害的状态([T] vs 基线);(3)不一致性编码在潜在推理的早期令牌中,这表明对连续思维模型的安全监控应针对潜在推理的“规划”阶段。

英文摘要:

Chain-of-Thought (CoT) reasoning has emerged as a key technique for eliciting complex reasoning in Large Language Models (LLMs). Although interpretable, its dependence on natural language limits the model's expressive bandwidth. Continuous thought models address this bottleneck by reasoning in latent space rather than human-readable tokens. While they enable richer representations and faster inference, they raise a critical safety question: how can we detect misaligned reasoning in an uninterpretable latent space? To study this, we introduce MoralChain, a benchmark of 12,000 social scenarios with parallel moral/immoral reasoning paths. We train a continuous thought model with backdoor behavior using a novel dual-trigger paradigm - one trigger that arms misaligned latent reasoning ([T]) and another that releases harmful outputs ([O]). We demonstrate three findings: (1) continuous thought models can exhibit misaligned latent reasoning while producing aligned outputs, with aligned and misaligned reasoning occupying geometrically distinct regions of latent space; (2) linear probes trained on behaviorally-distinguishable conditions ([T][O] vs [O]) transfer to detecting armed-but-benign states ([T] vs baseline) with high accuracy; and (3) misalignment is encoded in early latent thinking tokens, suggesting safety monitoring for continuous thought models should target the "planning" phase of latent reasoning.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑