Paper: 2603.20101 Authors: Tal Haklay, Nikhil Prakash, Sana Pandey, Antonio Torralba, Aaron Mueller, Jacob Andreas, Tamar Rott Shaham, Yonatan Belinkov Institutions: Technion, Northeastern, MIT, Boston University, Harvard Kempner Institute Categories: cs.AI

Abstract

Automated interpretability systems using LLMs promise to scale neural network analysis beyond human bottlenecks. However, evaluating these systems is challenging: outputs are open-ended, lack ground truth, and may vary across runs. This paper investigates evaluation pitfalls through automated circuit analysis, revealing that replication-based evaluation (comparing to human expert explanations) can mask critical failures including memorization, subjective interpretations, and superficial reasoning. The authors propose an unsupervised intrinsic evaluation based on functional interchangeability as a more robust alternative.

The Problem: Evaluating Automated Interpretability

Why Automated Interpretability?

Interpretability research aims to explain neural network internals:

  • How models implement in-context learning
  • How they solve arithmetic tasks
  • How they track grammatical relationships

Human bottleneck: Formulating hypotheses, designing experiments, iteratively refining conclusions requires expert labor.

Solution: Automated interpretability systems that:

  • Execute analysis subroutines autonomously
  • Design experiments themselves
  • Iteratively refine hypotheses like human researchers

The Evaluation Challenge

Evaluating automated interpretability is inherently difficult:

  1. Open-ended outputs: No fixed format or structure
  2. No ground truth: Multiple valid explanations exist
  3. High variance: Results vary across runs
  4. Abstraction levels: Equally valid explanations at different granularities
  5. Subjectivity: Human experts may disagree

Key question: How do we know if automated systems produce accurate, trustworthy explanations?

Circuit Analysis: A Case Study

What is Circuit Analysis?

Circuits: Subnetworks of attention heads and MLPs implementing specific computational pathways.

Goal: Understand how models solve tasks by:

  1. Identifying circuit components
  2. Characterizing functional roles of individual components
  3. Grouping components into clusters implementing higher-level mechanisms

Example task: Indirect Object Identification (IOI)

  • Input: “When Mary and John went to the store, John gave a drink to”
  • Model must predict: “Mary”
  • Circuit: Specific attention heads and MLPs that implement this reasoning

The Agentic System

Architecture:

  1. Input: Task description, circuit components, example prompts
  2. Research agent: Autonomously designs experiments and refines hypotheses
  3. Interpretability tools: Logit lens, activation patching, attention patterns
  4. Output: Component clusters with natural-language descriptions

Workflow:

Task + Circuit → Research Agent → Experiments → Hypotheses → Clusters

              Interpretability Tools
              (logit lens, patching, attention)

Evaluation Approach

Replication-based evaluation: Compare system outputs to human expert explanations from 6 published circuit analysis tasks:

  • IOI (Wang et al., 2022)
  • Greater-Than (Hanna et al., 2023)
  • Docstring (Tigges et al., 2024)
  • And others…

Initial result: System appears competitive with human experts!

The Pitfalls Revealed

Pitfall 1: Subjective and Incomplete Human Explanations

Problem: Human expert explanations are not ground truth.

Evidence:

  • Experts may disagree on interpretations
  • Explanations may be incomplete or focus on specific aspects
  • Different abstraction levels are equally valid

Example: For an attention head, one expert might say “retrieves subject information” while another says “attends to first noun” – both could be correct at different levels of abstraction.

Implication: Agreement with human explanations doesn’t guarantee correctness.

Pitfall 2: Outcome-Based Comparisons Obscure Process

Problem: Comparing final outputs ignores the research process.

What’s hidden:

  • How the system arrived at conclusions
  • Whether reasoning was sound or superficial
  • If experiments were well-designed or arbitrary
  • Whether evidence actually supports conclusions

Example: System might produce correct-sounding explanation through:

  • Genuine experimental reasoning ✓
  • Memorization of published results ✗
  • Superficial pattern matching ✗
  • Lucky guessing ✗

Implication: Matching outcomes doesn’t validate the research methodology.

Pitfall 3: Memorization and Informed Guessing

Critical finding: Claude Opus 4.1 exhibits evidence of memorization.

Evidence:

  • On at least one task, system reproduces published findings suspiciously well
  • Can infer task structure from superficial cues (task names, prompt patterns)
  • May have seen circuit analysis papers in training data

Experiment: When given only task name and circuit components (no prompts), system can sometimes generate plausible explanations.

Implication: Apparent success may reflect training data contamination rather than genuine interpretability reasoning.

Pitfall 4: Superficial Cue Usage

Problem: LLMs can use shortcuts instead of experimental reasoning.

Examples:

  • Task name suggests mechanism (e.g., “Greater-Than” → numerical comparison)
  • Prompt structure reveals task type
  • Component names hint at function (e.g., “head 15.13” might be known from literature)

Test: Remove informative cues and see if performance degrades.

Finding: Performance often remains surprisingly high, suggesting reliance on superficial patterns.

The Solution: Unsupervised Intrinsic Evaluation

Core Idea

Instead of comparing to human explanations, evaluate based on functional interchangeability.

Principle: If two components have similar functional roles, they should be interchangeable in the circuit.

Methodology

1. Generate component descriptions (automated system output)

2. Compute functional similarity:

  • For each pair of components, measure how interchangeable they are
  • Use causal interventions: swap components and measure task performance change
  • Similar components → small performance change
  • Different components → large performance change

3. Compare to description similarity:

  • Compute semantic similarity of generated descriptions (using embeddings)
  • Check if description similarity correlates with functional similarity

4. Evaluation metric:

Correlation(description_similarity, functional_similarity)

High correlation → descriptions accurately capture functional roles.

Advantages

  1. No human labels needed: Fully automated evaluation
  2. Objective: Based on measurable task performance
  3. Scalable: Can evaluate many components quickly
  4. Process-agnostic: Doesn’t matter how system arrived at descriptions
  5. Robust to memorization: Functional tests can’t be memorized

Limitations

  1. Doesn’t capture all aspects: Functional similarity is one dimension
  2. Requires causal interventions: Computationally expensive
  3. Task-specific: Interchangeability depends on task
  4. Doesn’t validate reasoning process: Still outcome-based

Experimental Findings

Replication-Based Evaluation Results

Apparent success: System matches human expert explanations on most tasks.

Closer examination reveals:

  • Some system explanations are more accurate than published human explanations
  • Some matches likely due to memorization
  • Some successes from superficial cue usage

Intrinsic Evaluation Results

Key finding: Correlation between description similarity and functional similarity varies significantly across tasks.

High correlation tasks: System captures functional roles well Low correlation tasks: Descriptions don’t reflect actual component behavior

Insight: Intrinsic evaluation reveals quality differences masked by replication-based evaluation.

Implications for Automated Interpretability

What We Learned

  1. Replication is insufficient: Matching human explanations doesn’t validate automated systems
  2. Memorization is real: LLMs may have seen interpretability papers in training
  3. Superficial reasoning is common: Systems can succeed without genuine understanding
  4. Process matters: Outcome-based evaluation misses critical failures
  5. Intrinsic evaluation helps: Functional tests provide more robust signal

Recommendations for Evaluating Interpretability Agents

1. Use multiple evaluation approaches:

  • Replication-based (with caveats)
  • Intrinsic functional tests
  • Process-based evaluation (examine reasoning steps)
  • Adversarial tests (remove superficial cues)

2. Check for memorization:

  • Test on novel tasks not in literature
  • Remove task names and other identifying information
  • Use held-out circuits

3. Validate reasoning process:

  • Examine experiment designs
  • Check if evidence supports conclusions
  • Look for coherent research methodology

4. Use unsupervised metrics:

  • Functional interchangeability
  • Consistency across runs
  • Predictive power for downstream tasks

5. Be skeptical of perfect replication:

  • If system matches published results too well, investigate memorization
  • Look for cases where system disagrees with humans (might be more accurate!)

Broader Implications

For AI Safety

Concern: If we can’t reliably evaluate interpretability systems, we can’t trust them for safety-critical analysis.

Need: Robust evaluation methods before deploying automated interpretability for:

  • Detecting deceptive behavior
  • Identifying harmful capabilities
  • Verifying alignment properties

For Scientific Progress

Challenge: Automated systems might:

  • Reproduce existing findings (memorization)
  • Generate plausible-sounding but incorrect explanations
  • Miss novel insights humans would discover

Opportunity: Well-evaluated systems could:

  • Scale interpretability research dramatically
  • Discover patterns humans miss
  • Enable analysis of larger models

For Methodology

Lesson: Evaluation is as important as the system itself.

Principle: Don’t assume LLM-based systems are reasoning correctly just because outputs look good.

Practice: Invest in evaluation infrastructure alongside system development.

Future Directions

Better Evaluation Methods

  1. Causal validation: Test if explanations predict intervention effects
  2. Counterfactual reasoning: Check if system understands why alternatives fail
  3. Consistency checks: Verify explanations remain stable across perturbations
  4. Human-in-the-loop: Combine automated metrics with expert judgment

Improved Systems

  1. Explicit reasoning traces: Make research process transparent
  2. Uncertainty quantification: Flag low-confidence explanations
  3. Adversarial training: Train on tasks designed to prevent shortcuts
  4. Modular architectures: Separate hypothesis generation from experimental design

Theoretical Foundations

  1. Formalize interpretability goals: What makes an explanation “good”?
  2. Develop evaluation theory: Principled frameworks for assessing explanations
  3. Study memorization: Understand when and how LLMs memorize interpretability findings

Takeaways

  1. Replication-based evaluation is flawed: Matching human explanations doesn’t validate automated systems
  2. Memorization is a serious concern: LLMs may reproduce published findings without genuine understanding
  3. Superficial reasoning is common: Systems can succeed using shortcuts rather than experimental reasoning
  4. Intrinsic evaluation helps: Functional interchangeability provides more robust signal
  5. Process matters as much as outcomes: How systems arrive at conclusions is critical
  6. Evaluation is hard: No single metric captures all aspects of explanation quality
  7. Skepticism is warranted: Don’t trust automated interpretability systems without rigorous evaluation

This work serves as a cautionary tale for the field of automated interpretability. As we build increasingly autonomous systems for analyzing neural networks, we must invest equally in robust evaluation methods. The pitfalls identified here apply broadly to any automated scientific discovery system using LLMs.

The path forward requires:

  • Humility: Recognize limitations of current evaluation approaches
  • Rigor: Develop multiple complementary evaluation methods
  • Transparency: Make reasoning processes auditable
  • Skepticism: Question apparent successes and look for failure modes

Only with careful, multi-faceted evaluation can we trust automated interpretability systems to advance our understanding of neural networks safely and reliably.

论文: 2603.20101 作者: Tal Haklay, Nikhil Prakash, Sana Pandey, Antonio Torralba, Aaron Mueller, Jacob Andreas, Tamar Rott Shaham, Yonatan Belinkov 机构: Technion, Northeastern, MIT, Boston University, Harvard Kempner Institute 分类: cs.AI

摘要

使用 LLM 的自动化可解释性系统承诺将神经网络分析扩展到人类瓶颈之外。然而,评估这些系统具有挑战性:输出是开放式的,缺乏基本事实,并且可能在运行之间变化。本文通过自动化电路分析调查评估陷阱,揭示基于复制的评估(与人类专家解释比较)可能掩盖关键失败,包括记忆主观解释肤浅推理。作者提出了一种基于功能可互换性的无监督内在评估作为更稳健的替代方案。

问题:评估自动化可解释性

为什么需要自动化可解释性?

可解释性研究旨在解释神经网络内部:

  • 模型如何实现上下文学习
  • 它们如何解决算术任务
  • 它们如何跟踪语法关系

人类瓶颈:制定假设、设计实验、迭代完善结论需要专家劳动。

解决方案:自动化可解释性系统:

  • 自主执行分析子程序
  • 自己设计实验
  • 像人类研究人员一样迭代完善假设

评估挑战

评估自动化可解释性本质上是困难的:

  1. 开放式输出:没有固定格式或结构
  2. 无基本事实:存在多个有效解释
  3. 高方差:结果在运行之间变化
  4. 抽象级别:不同粒度的同样有效解释
  5. 主观性:人类专家可能不同意

关键问题:我们如何知道自动化系统是否产生准确、可信的解释?

电路分析:案例研究

什么是电路分析?

电路:实现特定计算路径的注意力头和 MLP 的子网络。

目标:通过以下方式理解模型如何解决任务:

  1. 识别电路组件
  2. 表征单个组件的功能角色
  3. 将组件分组为实现更高级机制的簇

示例任务:间接宾语识别(IOI)

  • 输入:“When Mary and John went to the store, John gave a drink to”
  • 模型必须预测:“Mary”
  • 电路:实现此推理的特定注意力头和 MLP

智能体系统

架构

  1. 输入:任务描述、电路组件、示例提示
  2. 研究智能体:自主设计实验并完善假设
  3. 可解释性工具:logit lens、激活修补、注意力模式
  4. 输出:带有自然语言描述的组件簇

工作流

任务 + 电路 → 研究智能体 → 实验 → 假设 → 簇

              可解释性工具
              (logit lens, 修补, 注意力)

评估方法

基于复制的评估:将系统输出与来自 6 个已发表电路分析任务的人类专家解释进行比较:

  • IOI(Wang 等,2022)
  • Greater-Than(Hanna 等,2023)
  • Docstring(Tigges 等,2024)
  • 等等…

初步结果:系统似乎与人类专家竞争!

揭示的陷阱

陷阱 1:主观和不完整的人类解释

问题:人类专家解释不是基本事实。

证据

  • 专家可能对解释不同意
  • 解释可能不完整或关注特定方面
  • 不同的抽象级别同样有效

示例:对于注意力头,一位专家可能说”检索主语信息”,而另一位说”关注第一个名词”——两者在不同抽象级别都可能是正确的。

含义:与人类解释的一致性不能保证正确性。

陷阱 2:基于结果的比较掩盖过程

问题:比较最终输出忽略了研究过程。

隐藏的内容

  • 系统如何得出结论
  • 推理是否合理或肤浅
  • 实验是否设计良好或任意
  • 证据是否真正支持结论

示例:系统可能通过以下方式产生听起来正确的解释:

  • 真正的实验推理 ✓
  • 记忆已发表的结果 ✗
  • 肤浅的模式匹配 ✗
  • 幸运猜测 ✗

含义:匹配结果不能验证研究方法。

陷阱 3:记忆和知情猜测

关键发现:Claude Opus 4.1 表现出记忆的证据。

证据

  • 在至少一个任务上,系统以可疑的方式很好地再现了已发表的发现
  • 可以从肤浅的线索(任务名称、提示模式)推断任务结构
  • 可能在训练数据中看到过电路分析论文

实验:当仅给出任务名称和电路组件(无提示)时,系统有时可以生成合理的解释。

含义:表面上的成功可能反映训练数据污染而不是真正的可解释性推理。

陷阱 4:肤浅线索使用

问题:LLM 可以使用捷径而不是实验推理。

示例

  • 任务名称暗示机制(例如,“Greater-Than” → 数值比较)
  • 提示结构揭示任务类型
  • 组件名称暗示功能(例如,“head 15.13”可能从文献中已知)

测试:删除信息性线索并查看性能是否下降。

发现:性能通常保持惊人的高,表明依赖肤浅模式。

解决方案:无监督内在评估

核心思想

不是与人类解释比较,而是基于功能可互换性进行评估。

原则:如果两个组件具有相似的功能角色,它们应该在电路中可互换。

方法论

1. 生成组件描述(自动化系统输出)

2. 计算功能相似性

  • 对于每对组件,测量它们的可互换性
  • 使用因果干预:交换组件并测量任务性能变化
  • 相似组件 → 小性能变化
  • 不同组件 → 大性能变化

3. 与描述相似性比较

  • 计算生成描述的语义相似性(使用嵌入)
  • 检查描述相似性是否与功能相似性相关

4. 评估指标

相关性(描述相似性, 功能相似性)

高相关性 → 描述准确捕获功能角色。

优势

  1. 不需要人类标签:完全自动化评估
  2. 客观:基于可测量的任务性能
  3. 可扩展:可以快速评估许多组件
  4. 过程无关:系统如何得出描述无关紧要
  5. 对记忆稳健:功能测试无法记忆

限制

  1. 不捕获所有方面:功能相似性是一个维度
  2. 需要因果干预:计算昂贵
  3. 任务特定:可互换性取决于任务
  4. 不验证推理过程:仍然基于结果

实验发现

基于复制的评估结果

表面成功:系统在大多数任务上与人类专家解释匹配。

仔细检查揭示

  • 一些系统解释比已发表的人类解释更准确
  • 一些匹配可能由于记忆
  • 一些成功来自肤浅线索使用

内在评估结果

关键发现:描述相似性和功能相似性之间的相关性在任务之间显著变化。

高相关性任务:系统很好地捕获功能角色 低相关性任务:描述不反映实际组件行为

洞察:内在评估揭示了基于复制的评估掩盖的质量差异。

对自动化可解释性的影响

我们学到了什么

  1. 复制是不够的:匹配人类解释不能验证自动化系统
  2. 记忆是真实的:LLM 可能在训练中看到过可解释性论文
  3. 肤浅推理很常见:系统可以在没有真正理解的情况下成功
  4. 过程很重要:基于结果的评估错过了关键失败
  5. 内在评估有帮助:功能测试提供更稳健的信号

评估可解释性智能体的建议

1. 使用多种评估方法

  • 基于复制(有注意事项)
  • 内在功能测试
  • 基于过程的评估(检查推理步骤)
  • 对抗性测试(删除肤浅线索)

2. 检查记忆

  • 在文献中没有的新任务上测试
  • 删除任务名称和其他识别信息
  • 使用保留的电路

3. 验证推理过程

  • 检查实验设计
  • 检查证据是否支持结论
  • 寻找连贯的研究方法

4. 使用无监督指标

  • 功能可互换性
  • 运行之间的一致性
  • 下游任务的预测能力

5. 对完美复制持怀疑态度

  • 如果系统与已发表的结果匹配得太好,调查记忆
  • 寻找系统与人类不同意的情况(可能更准确!)

更广泛的影响

对 AI 安全

担忧:如果我们无法可靠地评估可解释性系统,我们就无法信任它们进行安全关键分析。

需要:在部署自动化可解释性之前需要稳健的评估方法:

  • 检测欺骗行为
  • 识别有害能力
  • 验证对齐属性

对科学进步

挑战:自动化系统可能:

  • 再现现有发现(记忆)
  • 生成听起来合理但不正确的解释
  • 错过人类会发现的新见解

机会:经过良好评估的系统可以:

  • 大幅扩展可解释性研究
  • 发现人类错过的模式
  • 实现对更大模型的分析

对方法论

教训:评估与系统本身一样重要。

原则:不要仅仅因为输出看起来不错就假设基于 LLM 的系统推理正确。

实践:在系统开发的同时投资评估基础设施。

未来方向

更好的评估方法

  1. 因果验证:测试解释是否预测干预效果
  2. 反事实推理:检查系统是否理解为什么替代方案失败
  3. 一致性检查:验证解释在扰动中保持稳定
  4. 人机协作:将自动化指标与专家判断相结合

改进的系统

  1. 显式推理轨迹:使研究过程透明
  2. 不确定性量化:标记低置信度解释
  3. 对抗性训练:在旨在防止捷径的任务上训练
  4. 模块化架构:将假设生成与实验设计分离

理论基础

  1. 形式化可解释性目标:什么使解释”好”?
  2. 开发评估理论:评估解释的原则性框架
  3. 研究记忆:理解 LLM 何时以及如何记忆可解释性发现

要点

  1. 基于复制的评估有缺陷:匹配人类解释不能验证自动化系统
  2. 记忆是一个严重问题:LLM 可能在没有真正理解的情况下再现已发表的发现
  3. 肤浅推理很常见:系统可以使用捷径而不是实验推理成功
  4. 内在评估有帮助:功能可互换性提供更稳健的信号
  5. 过程与结果一样重要:系统如何得出结论至关重要
  6. 评估很难:没有单一指标捕获解释质量的所有方面
  7. 怀疑是有根据的:在没有严格评估的情况下不要信任自动化可解释性系统

这项工作作为自动化可解释性领域的警示故事。随着我们构建越来越自主的系统来分析神经网络,我们必须同样投资于稳健的评估方法。这里确定的陷阱广泛适用于任何使用 LLM 的自动化科学发现系统。

前进的道路需要:

  • 谦逊:认识到当前评估方法的局限性
  • 严谨:开发多种互补的评估方法
  • 透明:使推理过程可审计
  • 怀疑:质疑表面上的成功并寻找失败模式

只有通过仔细的、多方面的评估,我们才能信任自动化可解释性系统安全可靠地推进我们对神经网络的理解。