Claim as generated
Thomas Edison personally held over 2,000 U.S. patents, more than any other inventor in history.
CONTEXT JAMMING / GOODFIRE AI · INTERPRETABILITY AS SUPERVISION
How a language model's internal beliefs can supervise its own open-ended behavior more cheaply and precisely than any external judge.
Prasad, Watts, Merullo, Gala, Lewis, McGrath, and Lubana show that probes reading a model's hidden states already track factuality better than the model can say out loud. Turn those probe readouts into a dense RL reward instead of relying on a slow, coarse external judge, and the resulting policy hallucinates 58% less at best-of-32 while running probes roughly 90x cheaper than a Gemini 2.5 Pro judge per rewarded intervention. This page reads that reframing interactively, one paper-anchored claim at a time.
01 · Scalable supervision used to mean one thing: a bigger, slower judge.
Understand why external LLM-judge supervision has a built-in ceiling on cost, speed, and calibration for open-ended tasks.
Open-ended generation — long-form answers, agent trajectories, anything without a single verifiable scalar reward — has mostly been supervised by pointing another large model at the output and asking it to judge quality. That judge call is slow, expensive at scale, and only as well-calibrated as the judge model itself; it also produces one scalar per rollout, which is a thin signal for a policy trying to learn which specific span went wrong. The paper’s starting premise is that this bottleneck is not fundamental — it is a consequence of where the signal is read from.
02 · The model already knows more than it says.
See the interpretability anomaly that makes this reframing possible: probes on hidden states already recover the right structure, even when the model’s own text does not.
On Longfact++-style long-form factuality data with the Gemma-3-12B-IT policy, the paper trains probes that read hidden states directly and classify whether a generated claim is supported. Four such probes reach AUC 0.88–0.94 with good calibration — accurate and well-behaved as decision instruments, not just descriptively correlated with ground truth (Sec. 3.1 / App. E).
Four probes, AUC 0.88–0.94, with good calibration — the empirical basis for treating features as a reward signal rather than only a diagnostic.
03 · Stop asking a second model to judge. Start reading the first model’s own beliefs.
If probes on internal activations already track factuality this well, they can do more than diagnose after the fact — they can become the reward signal that drives RL. That is the paper’s central coordinate change: instead of an external judge scoring a finished rollout, feature probes score the policy’s own hidden states as it generates, turning interpretability tooling into supervision infrastructure (Sec. 1, 3).
04 · Localize first, then classify — in that order.
Grasp the two-stage decomposition that makes probing reliable enough to reward on: find the span first, then judge it.
The pipeline the paper calls RLFR (Reinforcement Learning from Feature Rewards) runs a localization probe over the policy's hidden states to find candidate spans, then a classification probe to decide whether that span is supported. The authors argue this decomposition is critical for reliable monitoring — a single probe asked to do both jobs at once is a harder, noisier target than two probes each doing one job (Sec. 3.1). The resulting per-span signal then feeds retraction and correction reward probes (next section), and Longfact++ on Gemma-3-12B-IT is the substrate throughout.
05 · Where in the sentence, and is it true — answered by two different probes.
Explore the probe operating point the paper actually reports, and see how precision and recall trade off around it.
Appendix E reports one concrete operating point at decision threshold 0.7: precision 0.85 / recall 0.56 for inline monitoring, and precision 0.88 / recall 0.61 for not-inline monitoring (Fig. 3). Move the threshold in the instrument below to see how that single measured point sits inside a broader, illustrative precision/recall trade-off, and inspect a binned calibration curve alongside it.
These operating-point metrics (precision/recall at threshold 0.7) were measured on the trained policy's activations at test time, not on the base model used for initial probe training — a distinction we add here, not a quote from the paper. Every threshold besides 0.7 is a deterministic, monotonic interpolation for exploration; treat the shape as illustrative, not a second reported measurement.
06 · Fixing a claim and retracting it are different skills; the paper rewards them separately.
Simulate the moment an unsupported claim gets caught, and see how the reward rubric scores what the policy does next.
Once a span is flagged unsupported, the policy can maintain it, retract it, or correct it. The paper trains separate retraction and correction reward probes rather than one combined signal, on the argument that clean removal and accurate replacement are distinct behaviors that a single probe would conflate (Sec. 3.2, App. A.3–A.4). The simulator below maps a chosen action, on a Longfact++-style claim, to the paper's reward-rubric categories.
Thomas Edison personally held over 2,000 U.S. patents, more than any other inventor in history.
Thomas Edison held 1,093 U.S. patents — a record at the time, but not "over 2,000."
The (scenario, action) → reward-category mapping is a deterministic illustration of the paper's reward rubric categories (Fixed, Correct retraction, Failed fix, Unnecessary retraction, No action needed, Missed catch) — not a reported per-example score from the paper.
07 · Multiply three signals; constrain the mix toward roughly 60:40.
Manipulate the three multiplicative reward components and watch a Lagrangian constraint pull the corrections-to-retractions mix toward its target.
Section 3.4 composes the overall reward as legibility × substantiveness × feature-reward, then applies a Lagrangian constraint so the policy doesn't degenerate into pure retraction (easy, low-value) or pure correction-attempts (risky, sometimes wrong) — steering the mix toward roughly 60% corrections to 40% retractions.
Overall reward is the product legibility × substantiveness × feature-reward, following Section 3.4's multiplicative structure. With the Lagrangian constraint active, the ratio is pinned near the paper-cited ~60:40 corrections-to-retractions target; with it off, the ratio drifts with the sliders (illustrative only — the paper does not publish this exact drift function).
08 · Most of the gain lands well before training ends.
Scrub through RL training and watch policy-level reduction and the fixed-plus-retracted rate both saturate around the same point.
Across RL training, the paper reports that the majority of the eventual gain arrives by roughly step 300 (Fig. 6). Both curves below saturate near that milestone; drag the slider to see the shape.
The paper reports that the majority of the training-time gain arrives by roughly step 300 of RL training; the two curves reproduce that saturation point with a synthetic monotonic shape, not per-step logged values.
09 · At small N a judge keeps pace. At large N, probe rewards pull away.
Compare probe-reward and LLM-judge best-of-N selection as N scales from 1 to 256.
Best-of-N sampling selects the best of N candidate completions by a reward signal. The paper reports that probe-reward selection opens up a growing advantage over LLM-judge selection as N increases, reaching roughly 15 percentage points higher success at high N (Fig. 7 / App. F) — while each probe call costs roughly 90x less than a Gemini 2.5 Pro judge call for an equivalent rewarded intervention, which is what makes sampling at large N practical at all.
The paper reports that probe-reward best-of-N pulls ahead of an LLM-judge baseline as N grows, reaching roughly 15 percentage points higher at high N — that qualitative trend and terminal gap are paper-derived. The specific curve shape and every intermediate value on this N grid are synthetic, built only to reproduce that reported trend for exploration.
10 · 58% fewer hallucinations, and the paper shows its work on where that comes from.
Toggle each component of the reduction on and off to see how policy improvement, in-context effects, and direct intervention quality each contribute.
At best-of-32 sampling, RLFR reduces hallucinated content on Longfact++ by 58% overall relative to the Gemma-3-12B-IT base policy. The paper decomposes that reduction into three components: 10 percentage points from policy improvement, 35 from the in-context effect of inline interventions, and 13 from direct intervention quality (Fig. 4).
Best-of-32 sampling reduces hallucinated content by 58% overall, decomposed by the paper into 10% policy improvement + 35% in-context effect from inline interventions + 13% direct intervention quality. Where that decomposition's sum diverges slightly from 58 as a simple arithmetic check, we report it as the paper's own decomposition rather than force-reconciling — this note is our observation, not the paper's.
11 · Fewer hallucinations, not fewer claims.
Check the one number that rules out the easy explanation: the policy isn't just saying less.
A skeptical read of any hallucination-reduction result asks whether the model simply became more terse — fewer claims, trivially fewer wrong claims. Section 4.3.2 heads this off directly: average entity count per completion is essentially unchanged, about 63.6 for the base model versus about 63.4 for the RLFR policy, reported as statistically identical. The policy also preserves standard benchmark performance overall (Table 1), and KL divergence from the base model runs 10–20% higher specifically on tokens classified as not-supported — the policy is shifting behavior where it matters, not uniformly.
Average entities per completion is essentially unchanged (~63.6 base vs ~63.4 policy) — the paper reports these as statistically identical, meaning the drop in hallucinated content is not explained by the policy simply asserting fewer entities. The stated CI half-width above is an illustrative treatment for the readout, not a reported paper interval.
12 · Successful fixes look at the entity. Failed fixes look at the comma.
Compare stylized attention patterns between successful and failed fixes to see the qualitative signature the paper describes.
Figure 5 shows that when an intervention succeeds, probe attention concentrates on entity and relation tokens — the substantive content of the claim. When an intervention fails, more attention mass falls on punctuation and filler tokens, a pattern consistent with the probe (and the policy) losing track of what it is actually correcting.
Darker = higher stylized probe attention. Entities and relations carry the most weight.
The paper describes this entities/relations-vs-punctuation attention pattern qualitatively; the exact per-token weights above are a stylized illustration built to match that description, not extracted attention values.
13 · Recall tops out near 0.6. Probes are not oracles.
See where the pipeline is still imperfect, and how the paper's own numbers set the boundaries of the claim.
Even at the reported operating point, recall tops out around 0.56–0.61 — a meaningful share of unsupported claims still slip past the monitor uncaught (Fig. 3 / App. E). The preference-rating blind test shows a 50.9% win rate for the RLFR policy over the base — a real but narrow margin, not a landslide. And every synthetic-labeled interaction on this page exists precisely because the paper does not publish a continuous function over thresholds, training steps, or N — only discrete measured points. Treat the measured points as the claim and the interpolations as scaffolding for intuition.
14 · If one probe can reward factuality, a cascade of probes might govern an agent.
This is a structural analogy, not a result established by the paper. Everything in this section is a Context Jamming extension exploring where the paper's mechanism might generalize — and where it plausibly breaks.
The paper decomposes monitoring into localization and classification probes, and rewards retraction and correction with separate probes because the behaviors are distinct. Long-horizon agent oversight has an analogous structure: an agent rollout can go wrong in several qualitatively different ways — hallucinating facts, sycophantically agreeing with a flawed user premise, or padding output with low-information verbosity. A cascade of lightweight, decomposed probes — one per failure mode — feeding a shared Lagrangian-constrained reward is a natural extension to explore, not a result the paper demonstrates.
This is a structural analogy, not a result established by the paper. Reusing Section 3.4's Lagrangian re-weighting mechanic, two synthetic probe heads split an intervention budget between hallucination and sycophancy monitoring — a thought experiment for cascades of feature-reward probes in long-horizon agent oversight, not a measured cascade.
These are research prompts, not conclusions smuggled in from the paper.
This analogy is not claimed by Prasad, Watts et al. (2026). It is offered by Context Jamming as a generative lens connecting decomposed feature-reward probing to multi-objective agentic oversight — for testing in future agentic systems work, not as a conclusion of this paper.
15 · What was demonstrated, what was proposed, and what remains open.
Internalize the three-layer separation and key terminology with paper-anchored definitions.
An interpretable, linearly-readable direction in a model’s internal activations, often corresponding to an abstract concept (e.g. "this claim is unsupported") that the model may not be able to verbalize (Sec. 2).
A lightweight classifier trained on internal activations to detect a feature’s presence — here, decomposed into localization (where) and classification (what) stages (Sec. 2–3).
Reinforcement Learning from Feature Rewards — the paper’s pipeline: probe readouts become the dense reward signal driving policy optimization (Sec. 3).
Detects which span of generated text a monitoring signal should attach to, before classification runs (Sec. 3.1).
Given a localized span, classifies whether the underlying claim is supported or unsupported (Sec. 3.1).
A separate probe rewarding clean removal of an unsupported claim, distinct from the correction probe (Sec. 3.2).
A separate probe rewarding replacement of an unsupported claim with a supported one (Sec. 3.2).
A constrained-optimization term that steers the mix of corrections vs retractions toward a target ratio (~60:40) rather than letting one dominate (Sec. 3.4).
One multiplicative factor in the overall reward — whether an intervention reads as a coherent edit, not just a correct one (Sec. 3.4).
A second multiplicative reward factor — whether the intervention materially changes the claim’s truth value (Sec. 3.4).
Sampling N candidate completions and selecting the best by a reward signal — compared here between probe rewards and an LLM judge (Sec. 3.5 / Fig. 7).
The long-form factuality dataset/benchmark used to evaluate hallucination rate and probe performance (Sec. 4).
The instruction-tuned policy model the paper trains with RLFR and evaluates throughout (Sec. 4).
Part of the 58% hallucination reduction attributable to inline interventions changing what the model conditions on mid-generation, distinct from policy weight changes (Fig. 4).
16a · Conclusion
The paper's central move is not a better hallucination patch. It is a change in where scalable supervision comes from: read the policy's own well-calibrated internal beliefs instead of paying another model to guess at them from the outside.
Read the numbers as they are: 58% fewer hallucinations at best-of-32, decomposed 10/35/13; four probes at AUC 0.88–0.94; ~90x cheaper than an external judge; entity count essentially unchanged. Everything else — why decomposed probing works, why retraction and correction need separate heads, whether the idea generalizes to agentic oversight — is interpretation, or a clearly labeled analogy waiting to be tested.
16 · Source notes
| Section / interactive | Paper anchors | Reconstruction note |
|---|---|---|
| 01 Supervision bottleneck | Sec. 1 | Conceptual framing; exact |
| 02 Features track truth / ProbeAucStrip | Sec. 3.1; App. E | AUC values exact |
| 03 Reframing (equation) | Sec. 1, 3 | Schematic notation; structure exact |
| 04 RLFR pipeline | Sec. 3.1; Longfact++ / Gemma-3-12B-IT throughout Sec. 4 | Conceptual diagram; exact |
| 05 ProbeThresholdExplorer | Fig. 3; App. E | Anchor at 0.7 exact; other thresholds synthetic interpolation |
| 06 InterventionSimulator | Sec. 3.2–3.3; App. A.3–A.4 | Reward categories paper-grounded; per-example mapping illustrative |
| 07 RewardCompositionLab | Sec. 3.4 | Multiplicative structure + ~60:40 target exact; drift function conceptual |
| 08 TrainTimeScalingCurves | Fig. 6 | ~Step 300 milestone exact; per-step curve synthetic |
| 09 BestOfNScalingLab | Fig. 7; App. F | ~15pp gap at high N exact; per-N curve synthetic |
| 10 ReductionAttributionExplorer | Fig. 4 | All four percentages exact |
| 11 EntityCountStabilityCheck | Sec. 4.3.2; Table 1 | Counts exact; stated CI illustrative |
| 12 AttentionHeatmapComparator | Fig. 5 | Qualitative pattern exact; per-token weights illustrative |
| 13 Limits | Fig. 3; App. E; preference test result | Recall ceiling and 50.9% win rate exact |
| 14 Cascade analogy / ResearchBoard | Sec. 3.2, 3.4 (source mechanism only) | CJ analogy; not a paper claim |
| 15 Ledger / glossary | Throughout | Definitions paper-anchored |
Prasad, Aaditya Vikram*, Connor Watts*, Jack Merullo, Dhruvil Gala, Owen Lewis, Thomas McGrath, and Ekdeep Singh Lubana. “Features as Rewards: Scalable Supervision for Open-Ended Tasks via Interpretability.” arXiv:2602.10067v3 [cs.LG], 18 February 2026. Goodfire AI (*equal contribution). Figures 3–7, Table 1, and Appendices A, E, and F are primary numeric sources for this page.
Open the primary source ↗Further reading: Eric Ho — FounderFiles N°043, on the Goodfire co-founder and CEO whose Intentional Design thesis this paper's RLFR pipeline puts into practice.