Uzay Macar, Li Yang, Atticus Wang, Peter Wallich, Emmanuel Ameisen, Jack Lindsey · 2026 · arXiv preprint
Detecting an injected concept runs through a two-stage circuit: early features carrying the evidence suppress later features that would otherwise answer ‘no’. The circuit appears only after preference-based post-training, and removing refusal directions raised detection without false positives.