PRISM: Recovering Instruction Sets from Language Model Activations.

arXiv:2606.09563v2 Announce Type: replace Abstract: As LLMs are deployed as agents, reliable monitoring requires knowing not only what they output, but which instructions are steering their behavior. This is difficult when models infer unintended subgoals, fol