从内部理解 AI:面向 AI 安全的机制可解释性现状
Understanding AI from the Inside: The State of Mechanistic Interpretability for AI Safety
Fazl Barez · Tung-Yu Wu · Hunar Batra · Gabriele Dominici · Florent Draye · Yanai Elazar · et al.
中文摘要
神经网络可能成为人类历史上最具影响力的产物之一。随着系统能力与自主性提升,其造成社会危害的潜力也在增长,使 AI 安全成为时代核心挑战。然而,我们仍在未完全理解其工作原理、未知情境下的行为及可靠控制方式的情况下构建日益强大的系统。机制可解释性(mechanistic interpretability)通过研究内部表征与计算来理解这些系统,旨在评估、预测和控制行为。本文综述面向 AI 安全的机制可解释性,回答核心问题:理解模型运作方式是否真能使其更安全?我们将机制可解释性置于更广泛的可解释性研究背景中,比较其机制证据与行为评估。介绍基础概念,包括特征(features)、多义性(polysemanticity)、Transformer 计算和电路(circuits),并综述特征提取与分析、电路发现与因果验证、用自然语言解释中间表征、学习动力学及训练数据归因等方法。除综述现有方法外,提出评估机制可解释性主张的统一框架,并按目标、假设与权衡刻画六种研究取向。最后探讨机制理解如何支持 AI 安全,包括知识编辑、引导和监控,评估其局限、失效模式、开放问题及与行为安全措施的关系。同时发布包含可复现关键发现代码 notebook 的仓库,供读者通过动手实验建立直觉。
关键要点
- 01问题:强大神经网络缺乏内部理解,机制可解释性旨在评估、预测和控制行为以提升 AI 安全。
- 02方法:综述特征、多义性、Transformer 计算与电路,以及特征提取、电路发现、因果验证等技术。
- 03框架:提出评估机制可解释性主张的统一框架,按目标、假设与权衡划分六种研究取向。
- 04应用:机制理解可支持知识编辑、引导和监控等安全干预,但存在局限与失效模式。
- 05资源:发布代码 notebook 仓库,复现综述方法的关键发现,便于动手实验。
解读
尚无解读。
原始英文摘要
arXiv:2611.08438v1 Announce Type: new Abstract: Neural networks are likely to be among the most consequential artefacts in human history. As these systems become more capable and autonomous, their potential to cause societal harm also grows, making AI safety one of the defining challenges of our time. Yet we continue to build increasingly powerful systems without fully understanding how they work, how they will behave in unfamiliar situations, or how to reliably control them. Mechanistic interpretability offers a path towards understanding these systems by studying their internal representations and computations, with the aim of evaluating, predicting, and controlling behaviour. We survey mechanistic interpretability for AI safety in order to answer the question: Does understanding how models work actually make them safer? We place mechanistic interpretability in the broader context of interpretability research and compare its mechanistic evidence with behavioural evaluation. We introduce the foundations of mechanistic interpretability, including features, polysemanticity, transformer computation, and circuits, and survey methods for feature extraction and analysis, circuit discovery and causal verification, explaining intermediate representations in natural language, learning dynamics, and training-data attribution. Beyond surveying existing methods, we propose a unified framework for evaluating mechanistic interpretability claims and characterise six research orientations by their goals, assumptions, and trade-offs. Finally, we examine how mechanistic understanding can support AI safety, including knowledge editing, steering, and monitoring, and assess its limitations, failure modes, open problems, and relationship to behavioural safety measures. We also release a repository of code notebooks with worked examples that reproduce key findings from surveyed methods, allowing readers to build intuition through hands-on experimentation.