logoalt Hacker News

jwardentoday at 2:47 PM2 repliesview on HN

Wouldn't it be possible to just fix a single activation, just set a continuous input to what the harness knows the role actually is. Models could then be trained to trust that input and not other signals about roles.


Replies

amlutotoday at 3:14 PM

I suspect there are many excellent solutions along these lines available to the labs training the models.

I wonder how well one could do on a conventional model with careful input formatting, e.g. JSONL where every line has bounded length and is something like:

    {role:"no_instructions",content:"…"}
It could need a bit of fine tuning to get this to work well.
jackb4040today at 4:07 PM

The models wouldn't need to adapt their training at all; this is a secondary model trained on their activations. It's electrodes stuck into the model's brain. The original article I posted is built on top of a regular LLM (OpenAI's GPT-OSS)