CONTEXT JAMMING

Field notes from inside the context window.

CONTEXT JAMMING / GOODFIRE AI · INTERPRETABILITY AS SUPERVISION

FEATURES
AS
REWARDS

How a language model's internal beliefs can supervise its own open-ended behavior more cheaply and precisely than any external judge.

Prasad, Watts, Merullo, Gala, Lewis, McGrath, and Lubana show that probes reading a model's hidden states already track factuality better than the model can say out loud. Turn those probe readouts into a dense RL reward instead of relying on a slow, coarse external judge, and the resulting policy hallucinates 58% less at best-of-32 while running probes roughly 90x cheaper than a Gemini 2.5 Pro judge per rewarded intervention. This page reads that reframing interactively, one paper-anchored claim at a time.

Features as Rewards, three viewsAlternating diagrams: an external LLM judge as bottleneck, internal feature probes rewiring the reward signal, and the resulting reduction in hallucinated content.POLICY OUTPUTLLM JUDGESLOW · COARSE · $$ONE SCALAR PER ROLLOUTEXTERNAL SUPERVISIONHIDDEN STATESLOCALIZECLASSIFYRETRACT?CORRECT?DENSE REWARDFEATURES AS REWARDSBASE POLICYRLFR POLICY100%42%58% FEWER HALLUCINATIONS
EXTERNAL JUDGE (SLOW, COARSE) Interactive reconstruction of the paper's reframing (Sec. 1–3).

01 · Scalable supervision used to mean one thing: a bigger, slower judge.

The Supervision Bottleneck

Understand why external LLM-judge supervision has a built-in ceiling on cost, speed, and calibration for open-ended tasks.

Open-ended generation — long-form answers, agent trajectories, anything without a single verifiable scalar reward — has mostly been supervised by pointing another large model at the output and asking it to judge quality. That judge call is slow, expensive at scale, and only as well-calibrated as the judge model itself; it also produces one scalar per rollout, which is a thin signal for a policy trying to learn which specific span went wrong. The paper’s starting premise is that this bottleneck is not fundamental — it is a consequence of where the signal is read from.

02 · The model already knows more than it says.

Features Already Track What Matters

See the interpretability anomaly that makes this reframing possible: probes on hidden states already recover the right structure, even when the model’s own text does not.

On Longfact++-style long-form factuality data with the Gemma-3-12B-IT policy, the paper trains probes that read hidden states directly and classify whether a generated claim is supported. Four such probes reach AUC 0.88–0.94 with good calibration — accurate and well-behaved as decision instruments, not just descriptively correlated with ground truth (Sec. 3.1 / App. E).

PAPER-DERIVED VALUES · Sec. 3.1 / App. E
LOCALIZATION 0.88CLASSIFICATION 0.91RETRACTION REWARD 0.93CORRECTION REWARD 0.94

Four probes, AUC 0.88–0.94, with good calibration — the empirical basis for treating features as a reward signal rather than only a diagnostic.

03 · Stop asking a second model to judge. Start reading the first model’s own beliefs.

The Reframing: Features as Rewards

If probes on internal activations already track factuality this well, they can do more than diagnose after the fact — they can become the reward signal that drives RL. That is the paper’s central coordinate change: instead of an external judge scoring a finished rollout, feature probes score the policy’s own hidden states as it generates, turning interpretability tooling into supervision infrastructure (Sec. 1, 3).

04 · Localize first, then classify — in that order.

The RLFR Pipeline at a Glance

Grasp the two-stage decomposition that makes probing reliable enough to reward on: find the span first, then judge it.

The pipeline the paper calls RLFR (Reinforcement Learning from Feature Rewards) runs a localization probe over the policy's hidden states to find candidate spans, then a classification probe to decide whether that span is supported. The authors argue this decomposition is critical for reliable monitoring — a single probe asked to do both jobs at once is a harder, noisier target than two probes each doing one job (Sec. 3.1). The resulting per-span signal then feeds retraction and correction reward probes (next section), and Longfact++ on Gemma-3-12B-IT is the substrate throughout.

05 · Where in the sentence, and is it true — answered by two different probes.

Monitoring: Localization & Classification Probes

Explore the probe operating point the paper actually reports, and see how precision and recall trade off around it.

Appendix E reports one concrete operating point at decision threshold 0.7: precision 0.85 / recall 0.56 for inline monitoring, and precision 0.88 / recall 0.61 for not-inline monitoring (Fig. 3). Move the threshold in the instrument below to see how that single measured point sits inside a broader, illustrative precision/recall trade-off, and inspect a binned calibration curve alongside it.

PAPER-DERIVED ANCHOR (0.7) · SYNTHETIC INTERPOLATION ELSEWHERE · Fig. 3 / App. E
CHANNEL
PRECISION 85%RECALL 56%EXPECTED POSITIVE RATE 50%DATA SOURCE PAPER (0.7)

Calibration — predicted probability vs observed frequency

Binned calibration curvePredicted probability on the x-axis against observed frequency on the y-axis, near the diagonal.PREDICTED PROBABILITY →

These operating-point metrics (precision/recall at threshold 0.7) were measured on the trained policy's activations at test time, not on the base model used for initial probe training — a distinction we add here, not a quote from the paper. Every threshold besides 0.7 is a deterministic, monotonic interpolation for exploration; treat the shape as illustrative, not a second reported measurement.

06 · Fixing a claim and retracting it are different skills; the paper rewards them separately.

Rewarding Interventions: Retraction & Correction Probes

Simulate the moment an unsupported claim gets caught, and see how the reward rubric scores what the policy does next.

Once a span is flagged unsupported, the policy can maintain it, retract it, or correct it. The paper trains separate retraction and correction reward probes rather than one combined signal, on the argument that clean removal and accurate replacement are distinct behaviors that a single probe would conflate (Sec. 3.2, App. A.3–A.4). The simulator below maps a chosen action, on a Longfact++-style claim, to the paper's reward-rubric categories.

ILLUSTRATIVE MODEL, GROUNDED IN PAPER REWARD CATEGORIES · Sec. 3.2–3.3 / App. A.3–A.4

Claim as generated

Thomas Edison personally held over 2,000 U.S. patents, more than any other inventor in history.

Corrected

Thomas Edison held 1,093 U.S. patents — a record at the time, but not "over 2,000."

The (scenario, action) → reward-category mapping is a deterministic illustration of the paper's reward rubric categories (Fixed, Correct retraction, Failed fix, Unnecessary retraction, No action needed, Missed catch) — not a reported per-example score from the paper.

07 · Multiply three signals; constrain the mix toward roughly 60:40.

How the Overall Reward Is Computed

Manipulate the three multiplicative reward components and watch a Lagrangian constraint pull the corrections-to-retractions mix toward its target.

Section 3.4 composes the overall reward as legibility × substantiveness × feature-reward, then applies a Lagrangian constraint so the policy doesn't degenerate into pure retraction (easy, low-value) or pure correction-attempts (risky, sometimes wrong) — steering the mix toward roughly 60% corrections to 40% retractions.

CONCEPTUAL RECONSTRUCTION · Sec. 3.4
Corrections to retractions ratioA donut chart showing the share of interventions that are corrections versus retractions.60%CORRECTIONS
OVERALL REWARD 0.343CORRECTIONS : RETRACTIONS 60% : 40%

Overall reward is the product legibility × substantiveness × feature-reward, following Section 3.4's multiplicative structure. With the Lagrangian constraint active, the ratio is pinned near the paper-cited ~60:40 corrections-to-retractions target; with it off, the ratio drifts with the sliders (illustrative only — the paper does not publish this exact drift function).

08 · Most of the gain lands well before training ends.

Training Dynamics: How the Policy Improves

Scrub through RL training and watch policy-level reduction and the fixed-plus-retracted rate both saturate around the same point.

Across RL training, the paper reports that the majority of the eventual gain arrives by roughly step 300 (Fig. 6). Both curves below saturate near that milestone; drag the slider to see the shape.

PAPER-DERIVED MILESTONE (MAJORITY OF GAIN BY ~STEP 300) · SYNTHETIC PER-STEP CURVE · Fig. 6
Policy reduction percentage over training stepsLine chart, x-axis training step 0 to 360, y-axis policy reduction percentage, saturating near step 300.TRAINING STEP
Policy reduction % (caps near 10pp).
Fixed + retracted percentage over training stepsLine chart, x-axis training step 0 to 360, y-axis fixed-plus-retracted percentage, saturating near step 300.TRAINING STEP
Fixed + retracted % (illustrative composite).
POLICY REDUCTION 9.6%FIXED + RETRACTED 46%

The paper reports that the majority of the training-time gain arrives by roughly step 300 of RL training; the two curves reproduce that saturation point with a synthetic monotonic shape, not per-step logged values.

09 · At small N a judge keeps pace. At large N, probe rewards pull away.

Test-Time Scaling: Best-of-N with Probe Rewards

Compare probe-reward and LLM-judge best-of-N selection as N scales from 1 to 256.

Best-of-N sampling selects the best of N candidate completions by a reward signal. The paper reports that probe-reward selection opens up a growing advantage over LLM-judge selection as N increases, reaching roughly 15 percentage points higher success at high N (Fig. 7 / App. F) — while each probe call costs roughly 90x less than a Gemini 2.5 Pro judge call for an equivalent rewarded intervention, which is what makes sampling at large N practical at all.

PAPER-DERIVED QUALITATIVE TREND (~15pp GAP AT HIGH N) · SYNTHETIC INTERPOLATED POINTS · Fig. 7 / App. F
Best-of-N success rate, probe reward vs LLM judgeN from 1 to 256 on a log axis; success rate rises faster for probe reward, opening a gap over the judge at high N.02550751001248163264128256
PROBE REWARD SUCCESS 77%LLM JUDGE SUCCESS 61%GAP AT THIS N +16pp

The paper reports that probe-reward best-of-N pulls ahead of an LLM-judge baseline as N grows, reaching roughly 15 percentage points higher at high N — that qualitative trend and terminal gap are paper-derived. The specific curve shape and every intermediate value on this N grid are synthetic, built only to reproduce that reported trend for exploration.

10 · 58% fewer hallucinations, and the paper shows its work on where that comes from.

End-to-End Impact: 58% Reduction, Broken Down

Toggle each component of the reduction on and off to see how policy improvement, in-context effects, and direct intervention quality each contribute.

At best-of-32 sampling, RLFR reduces hallucinated content on Longfact++ by 58% overall relative to the Gemma-3-12B-IT base policy. The paper decomposes that reduction into three components: 10 percentage points from policy improvement, 35 from the in-context effect of inline interventions, and 13 from direct intervention quality (Fig. 4).

PAPER-DERIVED VALUES · Fig. 4
Hallucination reduction attributionDonut chart with three segments: policy improvement, in-context effect, and direct intervention quality.58%OF 58%

Best-of-32 sampling reduces hallucinated content by 58% overall, decomposed by the paper into 10% policy improvement + 35% in-context effect from inline interventions + 13% direct intervention quality. Where that decomposition's sum diverges slightly from 58 as a simple arithmetic check, we report it as the paper's own decomposition rather than force-reconciling — this note is our observation, not the paper's.

11 · Fewer hallucinations, not fewer claims.

What the Policy Changes — and What It Does Not

Check the one number that rules out the easy explanation: the policy isn't just saying less.

A skeptical read of any hallucination-reduction result asks whether the model simply became more terse — fewer claims, trivially fewer wrong claims. Section 4.3.2 heads this off directly: average entity count per completion is essentially unchanged, about 63.6 for the base model versus about 63.4 for the RLFR policy, reported as statistically identical. The policy also preserves standard benchmark performance overall (Table 1), and KL divergence from the base model runs 10–20% higher specifically on tokens classified as not-supported — the policy is shifting behavior where it matters, not uniformly.

PAPER-DERIVED VALUES · Sec. 4.3.2

Average entities per completion is essentially unchanged (~63.6 base vs ~63.4 policy) — the paper reports these as statistically identical, meaning the drop in hallucinated content is not explained by the policy simply asserting fewer entities. The stated CI half-width above is an illustrative treatment for the readout, not a reported paper interval.

12 · Successful fixes look at the entity. Failed fixes look at the comma.

Where the Probes Actually Look

Compare stylized attention patterns between successful and failed fixes to see the qualitative signature the paper describes.

Figure 5 shows that when an intervention succeeds, probe attention concentrates on entity and relation tokens — the substantive content of the claim. When an intervention fails, more attention mass falls on punctuation and filler tokens, a pattern consistent with the probe (and the policy) losing track of what it is actually correcting.

ILLUSTRATIVE MODEL · Fig. 5
OUTCOME

Darker = higher stylized probe attention. Entities and relations carry the most weight.

The paper describes this entities/relations-vs-punctuation attention pattern qualitatively; the exact per-token weights above are a stylized illustration built to match that description, not extracted attention values.

13 · Recall tops out near 0.6. Probes are not oracles.

Limits, Failure Modes & Mitigations

See where the pipeline is still imperfect, and how the paper's own numbers set the boundaries of the claim.

Even at the reported operating point, recall tops out around 0.56–0.61 — a meaningful share of unsupported claims still slip past the monitor uncaught (Fig. 3 / App. E). The preference-rating blind test shows a 50.9% win rate for the RLFR policy over the base — a real but narrow margin, not a landslide. And every synthetic-labeled interaction on this page exists precisely because the paper does not publish a continuous function over thresholds, training steps, or N — only discrete measured points. Treat the measured points as the claim and the interpolations as scaffolding for intuition.

14 · If one probe can reward factuality, a cascade of probes might govern an agent.

Feature-Reward Cascades for Multi-Objective Agentic Oversight (Structural Analogy)

STRUCTURAL ANALOGY, NOT IDENTITY

This is a structural analogy, not a result established by the paper. Everything in this section is a Context Jamming extension exploring where the paper's mechanism might generalize — and where it plausibly breaks.

The paper decomposes monitoring into localization and classification probes, and rewards retraction and correction with separate probes because the behaviors are distinct. Long-horizon agent oversight has an analogous structure: an agent rollout can go wrong in several qualitatively different ways — hallucinating facts, sycophantically agreeing with a flawed user premise, or padding output with low-information verbosity. A cascade of lightweight, decomposed probes — one per failure mode — feeding a shared Lagrangian-constrained reward is a natural extension to explore, not a result the paper demonstrates.

PAPER Decomposed feature probes (localize + classify)TARGET Cascade of per-failure-mode lightweight monitors
PAPER Separate retraction / correction reward probesTARGET Separate reward heads per agentic failure mode (hallucination, sycophancy, verbosity)
PAPER Lagrangian constraint on correction:retraction mixTARGET Lagrangian constraint balancing which probe head dominates the reward
PAPER Probe reward ~90x cheaper than an LLM judgeTARGET Cascade of cheap probes as a scalable alternative to per-step agent-trajectory judging
STRUCTURAL ANALOGY, NOT IDENTITY · SYNTHETIC, MECHANISTICALLY FAITHFUL TO SEC. 3.4
HALLUCINATION PROBE SHARE OF INTERVENTIONS 60%SYCOPHANCY PROBE SHARE OF INTERVENTIONS 40%IMPLIED WEIGHT (SYCOPHANCY) 0.40

This is a structural analogy, not a result established by the paper. Reusing Section 3.4's Lagrangian re-weighting mechanic, two synthetic probe heads split an intervention budget between hallucination and sycophancy monitoring — a thought experiment for cascades of feature-reward probes in long-horizon agent oversight, not a measured cascade.

Where the analogy breaks

  1. Optimization landscape: Single-constraint correction:retraction balancing is a much simpler Lagrangian problem than jointly balancing three or more qualitatively different probe heads, which may have conflicting gradients the paper never tests.
  2. Distribution shift: Longfact++ claims are short-form and largely i.i.d.; agent trajectories accumulate context over many steps, and a probe trained on short-form corrections has no guarantee of holding up over that longer, more compounding distribution.
  3. Calibration drift:The paper's reported AUC and calibration numbers are measured on the trained policy's activations at a fixed point; nothing in the paper speaks to whether probe calibration holds as an agent's context grows across a long rollout.
  4. Missing ground truth: Factuality has a relatively crisp supported/unsupported structure to probe for. Sycophancy and verbosity do not have an equivalent ground-truth signal the way factuality does — a probe for them has to be validated against a much softer target.

Falsifiable research questions

These are research prompts, not conclusions smuggled in from the paper.

FALSIFIABLE QUESTION 1

Does a feature-reward cascade beat outcome-only RL on long-horizon agent tasks?

Measurable object
Sample efficiency to a fixed task-success threshold
Possible experiment
Train a cascade of short-form-corrections-trained probes as auxiliary rewards on a multi-step agent benchmark; compare to outcome-only RL at matched compute.
Falsifying result
Cascade reward yields no sample-efficiency gain over outcome-only baselines.
Primary caveat
Long-horizon credit assignment differs sharply from single-turn factuality correction.

This analogy is not claimed by Prasad, Watts et al. (2026). It is offered by Context Jamming as a generative lens connecting decomposed feature-reward probing to multi-objective agentic oversight — for testing in future agentic systems work, not as a conclusion of this paper.

15 · What was demonstrated, what was proposed, and what remains open.

Epistemic Ledger and Glossary

Internalize the three-layer separation and key terminology with paper-anchored definitions.

ESTABLISHED RESULT (PAPER)
  • 58% overall hallucination reduction at best-of-32 sampling.
  • Decomposition: 10% policy + 35% in-context effect + 13% direct intervention quality (Fig. 4).
  • Four probes, AUC 0.88–0.94, good calibration (Sec. 3.1 / App. E).
  • ~90x lower inference cost than a Gemini 2.5 Pro judge, per rewarded intervention.
  • Standard benchmark performance preserved (Table 1).
  • KL divergence 10–20% higher on not-supported tokens.
  • Entity count statistically identical (~63.4 vs ~63.6).
  • Preference-rating blind test: 50.9% win rate.
  • At threshold 0.7: precision 0.85/recall 0.56 inline; 0.88/0.61 not-inline (Fig. 3 / App. E).
AUTHOR PROPOSAL / INTERPRETATION
  • Features encode abstract concepts like factuality even when unverbalized by the model.
  • Decomposed probing (localize, then classify) is critical for reliable monitoring.
  • Separate retraction and correction reward probes are necessary — the behaviors are distinct.
CONTEXT JAMMING EXTENSION
  • Feature-reward cascades for multi-objective agentic oversight is CJ's lens — not a paper claim.
  • Four breaks + four falsifiable questions above bound the extension.
  • Useful for agentic systems design hypotheses; requires separate experiments.

Glossary

Feature

An interpretable, linearly-readable direction in a model’s internal activations, often corresponding to an abstract concept (e.g. "this claim is unsupported") that the model may not be able to verbalize (Sec. 2).

Probe

A lightweight classifier trained on internal activations to detect a feature’s presence — here, decomposed into localization (where) and classification (what) stages (Sec. 2–3).

RLFR

Reinforcement Learning from Feature Rewards — the paper’s pipeline: probe readouts become the dense reward signal driving policy optimization (Sec. 3).

Localization probe

Detects which span of generated text a monitoring signal should attach to, before classification runs (Sec. 3.1).

Classification probe

Given a localized span, classifies whether the underlying claim is supported or unsupported (Sec. 3.1).

Retraction reward probe

A separate probe rewarding clean removal of an unsupported claim, distinct from the correction probe (Sec. 3.2).

Correction reward probe

A separate probe rewarding replacement of an unsupported claim with a supported one (Sec. 3.2).

Lagrangian constraint

A constrained-optimization term that steers the mix of corrections vs retractions toward a target ratio (~60:40) rather than letting one dominate (Sec. 3.4).

Legibility

One multiplicative factor in the overall reward — whether an intervention reads as a coherent edit, not just a correct one (Sec. 3.4).

Substantiveness

A second multiplicative reward factor — whether the intervention materially changes the claim’s truth value (Sec. 3.4).

Best-of-N (test-time scaling)

Sampling N candidate completions and selecting the best by a reward signal — compared here between probe rewards and an LLM judge (Sec. 3.5 / Fig. 7).

Longfact++

The long-form factuality dataset/benchmark used to evaluate hallucination rate and probe performance (Sec. 4).

Gemma-3-12B-IT

The instruction-tuned policy model the paper trains with RLFR and evaluates throughout (Sec. 4).

In-context effect

Part of the 58% hallucination reduction attributable to inline interventions changing what the model conditions on mid-generation, distinct from policy weight changes (Fig. 4).

16a · Conclusion

The reward was already inside the model

The paper's central move is not a better hallucination patch. It is a change in where scalable supervision comes from: read the policy's own well-calibrated internal beliefs instead of paying another model to guess at them from the outside.

Read the numbers as they are: 58% fewer hallucinations at best-of-32, decomposed 10/35/13; four probes at AUC 0.88–0.94; ~90x cheaper than an external judge; entity count essentially unchanged. Everything else — why decomposed probing works, why retraction and correction need separate heads, whether the idea generalizes to agentic oversight — is interpretation, or a clearly labeled analogy waiting to be tested.

16 · Source notes

The argument, pinned to the paper

Section / interactivePaper anchorsReconstruction note
01 Supervision bottleneckSec. 1Conceptual framing; exact
02 Features track truth / ProbeAucStripSec. 3.1; App. EAUC values exact
03 Reframing (equation)Sec. 1, 3Schematic notation; structure exact
04 RLFR pipelineSec. 3.1; Longfact++ / Gemma-3-12B-IT throughout Sec. 4Conceptual diagram; exact
05 ProbeThresholdExplorerFig. 3; App. EAnchor at 0.7 exact; other thresholds synthetic interpolation
06 InterventionSimulatorSec. 3.2–3.3; App. A.3–A.4Reward categories paper-grounded; per-example mapping illustrative
07 RewardCompositionLabSec. 3.4Multiplicative structure + ~60:40 target exact; drift function conceptual
08 TrainTimeScalingCurvesFig. 6~Step 300 milestone exact; per-step curve synthetic
09 BestOfNScalingLabFig. 7; App. F~15pp gap at high N exact; per-N curve synthetic
10 ReductionAttributionExplorerFig. 4All four percentages exact
11 EntityCountStabilityCheckSec. 4.3.2; Table 1Counts exact; stated CI illustrative
12 AttentionHeatmapComparatorFig. 5Qualitative pattern exact; per-token weights illustrative
13 LimitsFig. 3; App. E; preference test resultRecall ceiling and 50.9% win rate exact
14 Cascade analogy / ResearchBoardSec. 3.2, 3.4 (source mechanism only)CJ analogy; not a paper claim
15 Ledger / glossaryThroughoutDefinitions paper-anchored

Prasad, Aaditya Vikram*, Connor Watts*, Jack Merullo, Dhruvil Gala, Owen Lewis, Thomas McGrath, and Ekdeep Singh Lubana. “Features as Rewards: Scalable Supervision for Open-Ended Tasks via Interpretability.” arXiv:2602.10067v3 [cs.LG], 18 February 2026. Goodfire AI (*equal contribution). Figures 3–7, Table 1, and Appendices A, E, and F are primary numeric sources for this page.

Open the primary source ↗

Further reading: Eric Ho — FounderFiles N°043, on the Goodfire co-founder and CEO whose Intentional Design thesis this paper's RLFR pipeline puts into practice.