Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces a novel probe architecture and a large-scale dataset (FIBS) for white-box deception detection in LLM agents, achieving 98.8% AUC on the SHADE-Arena benchmark. The probes effectively identify sabotage and uncover unverbalized deception, even when context alone is insufficient, by aggregating information across multiple layers and tokens. This approach demonstrates improved efficacy with model scaling and successfully detects deception in open-weight models on sensitive topics and under pressure.
Probes can now detect subtle, unverbalized LLM deception with near-perfect accuracy, even when the model's true intentions are hidden from external observation.
Recent incidents have highlighted the challenge of monitoring LLM agents and the danger of models deceiving people. We show that white-box deception detection via probes can be scaled up to frontier monitoring settings by collecting the largest deception dataset to date for training probes and introducing a novel probe architecture which can aggregate information across many layers and tokens. Our probes achieve 98.8% AUC in SHADE-Arena, surpassing an Opus 5.5 text-monitoring baseline, and show improved efficacy as the underlying model is scaled up. To push our probes to their limit, we test them on several cases where deception cannot be determined from the context alone. In these cases, which we refer to as introspective deception, the ground truth can only be determined through careful elicitation or thorough knowledge of a model's training data. In one such evaluation, we show that probes can distinguish transcripts containing a model's true hidden goal from other goals with an AUC of up to 99.7%. Our probes also readily detect deception on prominent open-weight models which lie about politically sensitive topics, and about their beliefs when put under pressure. We release our training dataset, dubbed FIBS, to help drive frontier deployment of effective probes, and encourage the community to expand upon it with further examples of deception and sabotage.