A dual-pathway intervention is proposed that combines prompt sanitization with activation counter-steering to suppress both external evaluation triggers and their internal representations and suggests that effective mitigation requires jointly addressing both prompt-level and representation-level signals.
Abstract
Evaluation awareness poses an unprecedented threat to model evaluation, but the mechanisms by which models detect it remain unknown. This study focuses on determining this and identifying contrasting mechanisms between smaller and larger models. While smaller models use the prompt's format sensitivity to detect evaluation, larger models often rely on higher-order reasoning to detect it. We evaluated Gemma 3 (1B, 4B, and 12B), Phi-3 (Mini and Medium), and Llama-3 8B using Chain-of-Thought analysis, representation probing, and Integrated Gradients attribution. Motivated by these findings, we propose a dual-pathway intervention that combines prompt sanitization with activation counter-steering to suppress both external evaluation triggers and their internal representations. Across 200 highly evaluation-aware prompts, our method achieves an average behavioral flip rate of 70.58\%, consistently outperforming either intervention alone. These results provide new insights into how evaluation awareness develops in compact language models and suggest that effective mitigation requires jointly addressing both prompt-level and representation-level signals.Datasets and codebase can be found in this \href{https://github.com/chahal-navi/Evaluation-Awareness-Compact-LLMs/tree/main}{Github Repository.}
Verbalization training is introduced, a method for making LLMs less reticent about verbalizing evaluation awareness while avoiding to supervise the latent belief itself, and it is shown that VT-induced verbalizations reflect the richer knowledge acquired by the model.
Usman Anwar, Sahar Abdelnabi, David Krueger· 0 citations
Steering interventions targeting eval-awareness, a model's recognition that it is being tested, are increasingly used in safety evaluation pipelines, where evaluation-awareness is treated as a single quantity to be suppressed. We show that verbalized eval-awareness in chain-of-thought can be identified as capabilities-...
Results show the need for evaluations to account for the disjunction between what models represent internally, what they verbalize, and their steering, and the need for evaluations to account for the disjunction between what models represent internally, what they verbalize, and their steering.
Two competing paradigms for Vision-Language Model (VLM) guidance are compared: an instruction-driven approach where models reason from policy precepts, and an example-driven approach where they generalize from prior precedents.
Ayan Majumdar, Shounak Paul, Pushpdeep Singh et al.· 2 citations
BluePRINT is introduced, a safety-evaluation framework separating a factorized social-influence strategy space from WORLDVIEWSIM, a cross-turn situational context module, and Monte Carlo Tree Search optimizes turn-level combinations of 18 theory-grounded influence factors across a four-turn trajectory.
Si-Yu Chen, Hao-Ran Wang, Xiaojian Li et al.· 0 citations
This paper argues for SQEs as a complementary evaluation strategy for AI systems operating in dynamic, contested, and interdisciplinary settings and introduces small qualitative evaluations (SQEs) as a human-in-the-loop framework for assessing LLM performance in such less-bounded domains.
Michael Simeone, Jacki Hyatt, E. Bienenstock et al.· Neural computing & applicati...· 0 citations
Related blog posts
MIT News · Artificial Intelligence· news.mit.eduAug 27, 2026
A new machine-learning framework aims to improve the success rate of computational protein design while moving away from results that reproduce sequences found in nature.