Shashwat Singh, Tal Linzen, Shauli Ravfogel · 2026 · COLM 2026
Classifiers that see only the input match models at predicting hidden states, and models cannot tell internal tampering from input tampering. The authors conclude current evidence does not yet establish metacognitive monitoring.