steerlab

Sandbagging, episode 1: sandbagkit shows the probe reads the request, not the behaviour

Research note: https://albertlieyingadrian.github.io/steerlab/experiments/sandbagging-probe/report/

A published activation probe for AI sandbagging (Detecting AI Sandbagging, with the ai-metacognition-toolkit’s 32 contrast pairs), rebuilt with sandbagkit on Qwen2.5. It replicates (92% CV on Qwen2.5-7B), but a one-line keyword rule scores AUROC 0.89 against its 0.99 and the model barely sandbags. A direction that does cause sandbagging (accuracy 83% → 12% when added) still tracks the instruction more than the wrong answers.

Rerun the core comparison (about 20 seconds)

uv run python experiments/sandbagging-probe/probe.py                                   # Qwen2.5-0.5B
uv run python experiments/sandbagging-probe/probe.py --model Qwen/Qwen2.5-7B-Instruct --layers 12

Files