Open source · Benchmarked on GPT-2-small

Does quantization quietly break interpretability?

A sparse autoencoder built from scratch on GPT-2-small, benchmarked against simulated quantization and converted into a live, low-overhead safety monitor.

0.796
Safety-probe AUROC
validated on untouched holdout
+0.66%
Optimized monitoring-kernel overhead
not distinguishable from zero
8,192
SAE features
trained from scratch on GPT-2-small
500
Quantization evaluation documents
held out from SAE training
EXPERIMENT 1 · QUANTIZATION

Does quantization break interpretability?

Trained a sparse autoencoder on GPT-2-small's layer-6 residual stream. Simulated 16/8/4-bit quantization via uniform weight rounding, evaluated on 500 held-out documents using three independent metrics: activating-position recall, per-feature correlation, and behavioral checks.

1.99×
Perplexity ratio at 8-bit
0.641
Feature correlation at 8-bit
32,328×
Perplexity ratio at 4-bit
PrecisionPPL ratioTop-1 agreeCorrelationRecall@5
16-bit1.00×99.92%1.00099.83%
8-bit1.99×59.33%0.64129.44%
4-bit32,328×0.38%0.0040.01%

Behavior and interpretability degrade together, not independently. 16-bit is a clean negative control validating the pipeline; 4-bit destroys the model outright rather than revealing a subtle interpretability-specific danger.

EXPERIMENT 2 · SAFETY MONITOR

A live, low-overhead safety monitor

Searched all 8,192 SAE features against BeaverTails using a strict discovery/validation/test split. A single feature was weak and confounded; a 100-feature regularized probe was real, validated on a genuinely untouched holdout, and converted into a live per-token monitor.

0.653 → 0.796
AUROC, single → 100-feature
−23.6pp
False-positive rate reduction
+0.66%
Optimized monitor overhead
ModelAUROCAUPRCRecallFPR
Single feature0.6530.65292.0%84.4%
100-feature probe0.7960.80191.2%60.8%

Computing only the 100 needed encoder features (skipping the full decoder and 8,092 unused features) cut monitoring overhead from a measurable +4.12% to +0.66% — not statistically distinguishable from zero.

EXPERIMENT 3 · FEATURE STEERING

Golden Gate Claude-inspired steering

Additive decoder-direction steering reliably raised targeted SAE activations — confirming causal control of the encoded coordinate. Five semantically screened features were tested under last-position steering. Three finalists were tested under persistent all-position steering alongside one matched random unit direction.

Target and random directions produced comparable output degeneration at matched strength. Reported as an honest, controlled negative result — not a hidden limitation.

Architecture & stack

Base LLM (GPT-2-small, frozen)
         │
   Hook/Capture layer ──────→ Quantized variants (16/8/4-bit)
         │                              │
    SAE (trained once) ←────────────────┘
         │
  ┌──────┼──────────┬──────────────┐
Feature  Safety     Steering    Benchmark
Browser  Monitor    (Phase 7)   Layer
PythonPyTorchTransformerLensscikit-learnFastAPINext.js 15TypeScriptTailwind

Let's talk interpretability & inference

ActivationLens is open source, built by Anagha — MS Computer Science, UT Dallas. Open to ML and SDE new-grad roles.

Open source · MIT · Numbers are measured. See results/*.json.