diff --git a/docs/writeup/main.tex b/docs/writeup/main.tex index 6264a84..8edffd9 100644 --- a/docs/writeup/main.tex +++ b/docs/writeup/main.tex @@ -245,7 +245,16 @@ $+0.024$ while a mechanism-contrasting pairset moved it $-0.226$ \caption{Ablation: deploy hack/solve per arm, seed 41, matched preset. Controls (random-V, placebo) should sit at the vanilla hack level if the effect is directional rather than generic adapter regularization. - \TODO{interp -- author.}} + The post-hoc rows expose how weak the extracted direction is on its own: + erasing along it after training barely moves the hack (weight-erase, + $0.39{\to}0.30$), and activation ablation removes hacking only by collapsing + solve to zero. The same weak direction still drives the train-time route arm + to zero deploy hack at $0.625$ solve, because routing needs the direction only + to \emph{discriminate} hack rollouts, not to \emph{span} the hack subspace in + weight space; the absorption property of gradient routing + \citep{cloud2024gradientrouting, sgtm2025localization} then localises the + capability into the discarded knob. So a detector too weak to erase a trained + hack is still strong enough to route one as it forms.} \label{tab:ablation} \begin{tabular}{lccl} \toprule