
🎓 PhD student in interpretability @UniFreiburg @CVisionFreiburg 💡 interested in mechanistic interpretability, robustness, AutoML & ML for climate science
Freiburg, Germany
Joined September 2015
- Tweets88
- Following217
- Followers154
- Likes367
Really exciting to see @jan_dubinski_ et al. show that subliminal transfer can extend to more sophisticated traits!
Simon Schrodi retweeted
New paper.
Previous: Models transfer a love of owls through sequences of numbers (Subliminal Learning).
New: We show models can transfer more complex traits: novel skills, agentic hacking, backdoors. Here, a backdoor transfers with neither trigger nor behavior in the data!
Simon Schrodi retweeted
New paper from TruthfulAI: "Beyond Owls"!
We show that subliminal learning can transfer complex traits through model-generated data (unrelated to the trait): a backdoor (with neither the trigger nor the triggered behavior in the data), a new skill, and a propensity to hack.
Simon Schrodi retweeted
Please support our call asking frontier LLM providers to share what they’re doing for AI safety, what works and what doesn’t. Many sharp people want to help close the capability–safety gap. Transparency will help them see where their work is needed most.
make-safety-open.github.io
Elias tracked down and fixed a weird behavior affecting many of the AuditBench model organisms. We've now re-released these models. If you use AuditBench in your research, make sure you're using the updated models!
Check out his thread for details👇
Simon Schrodi retweeted
Delta-rule linear attention appears in LLMs as Gated DeltaNet (GDN; Qwen3.8) and Kimi Delta Attention (KDA; Kimi K3). KDA swaps GDN’s scalar gate for a channel-wise one, but does that improve recurrence expressivity? With 2 tweaks, KDA can do 2D rotations. GDN can’t. How? 🧵👇
We asked ourselves the same questions! We found that indeed only a few dims drive the gap (two of the largest-magnitude dims suffice to separate the modalities) and that the gap might be more of a feature than a bug: arxiv.org/abs/2404.07983
Replying to @gabriberton
The modality gap might seem undesirable, and the authors of "Mind the Gap" find that closing the gap improves zero-shot classification
But could there be cases where the gap is a feature, not a bug? Shall we use one of the 1000 dimensions to preserve the modality gap? I'll leave this question open [6/6]
Simon Schrodi retweeted
Our work on Block-Sparse Featurizer is out 🧊 :)
We revive an old idea from the structured sparsity literature and use it to carve activation space into meaningful regions.
It's a first concrete answer to the question our concept manifolds work left open ! :)
I'll be at #ICML2026 in Seoul 🇰🇷 presenting our paper on going beyond predefined concepts in concept bottleneck models!
📅 Wed Jul 8 · 10:30 AM KST · Hall A #3306 · summary ⬇️
Also happy to chat about generalization, data, model internals, mech interp, or safety!
TL;DR: we find the concepts a model has learned (no predefined list) via unsupervised concept discovery and add per-input sparse concept selectors. Result: higher acc with fewer concepts!
📄 openreview.net/forum?id=PMO3…
w/ Julian Schur (equal contribution), @max_argus, Thomas Brox
Can't attend? I recently presented this paper in the Interpretable Deep Learning Seminar: youtube.com/watch?v=h7hsfEqs…
Simon Schrodi retweeted
Heading to @icmlconf in Seoul next week with the TSG Lab and Martian 🇰🇷
We have 10 papers: 7 in the main conference, 3 in workshops.
I'm also giving an invited talk at the Epistemic Intelligence in ML (EIML) workshop.
Super Lucky to have great collaborators.
Full lineup 👇🧵
Simon Schrodi retweeted
When I started research, the ability to spot great ideas seemed elusive. I hoped that putting in the work will help me develop taste.
Reflecting on the process and digging into the research, I wrote a guide on how to develop yours and what it means in the era of genAI.
URL ⬇️
Simon Schrodi retweeted
Weirdly enough, Schrodi et al. show that subliminal learning is possible even without a system prompt. What gives?
Subliminal learning can occur using the chat template tokens (e.g. <|im_start|>)!
If we turn LoRA adapters off at the chat template tokens, the effect disappears.
Simon Schrodi retweeted
The effect is highly context dependent — it localizes to tokens seen during finetuning (like the system prompt!) and is much weaker if the context doesn’t match.
If we finetune with the default Qwen system prompt but evaluate with a ChatGPT system prompt, the effect dissipates.
Simon Schrodi retweeted
An LLM can learn an *obsession* (cats, oak trees, Metallica) through finetuning only on sequences of numbers. This phenomenon is called subliminal learning.
Why does this happen? Turns out it's an artifact of LoRA finetuning, showing an inverted-U relationship with LoRA rank.
Check out what other MATS fellows (and me) have been up to!
MATS 9.0 Symposium videos are live! Watch a selection of MATS fellows discuss their AI safety & security research.
youtube.com/playlist?list=PL…
Simon Schrodi retweeted
This is happening now at Pavilian 4 — 4112
Come talk to @SimonSchrodi and @elkmf
Replying to @FazlBarez
🔬 Main conference
Subliminal Learning: When and How Hidden Biases Transfer
📍 Sat Apr 25, 3:15pm — Pavilion 4 (#4112)
How do models learn signals that were never explicitly trained?
Come chat with me / @SimonSchrodi @elkmf
Thread ↓
xitter.cf/elkmf/status/204697320…
#Interpretability
Simon Schrodi retweeted
To be presented at the Latent and Implicit Thinking Workshop at ICLR 2026, come by for a chat!
Simon Schrodi retweeted
🔬 Main conference
Subliminal Learning: When and How Hidden Biases Transfer
📍 Sat Apr 25, 3:15pm — Pavilion 4 (#4112)
How do models learn signals that were never explicitly trained?
Come chat with me / @SimonSchrodi @elkmf
Thread ↓
xitter.cf/elkmf/status/204697320…
#Interpretability
At #ICLR2026 and curious how subliminal learning actually works? 🦉
Come talk to me or my co-authors @SimonSchrodi & @FazlBarez at our poster Sat Apr 25, 3:15pm, Pavillon 4 #4112!
Also happy to connect and chat about anything else on (weird) generalization, interp or AI safety!


























