Overthinking the Truth: Understanding how Language Models Process False Demonstrations
Danny Halawi, Jean-Stanislas Denain, Jacob Steinhardt
TL;DR
The paper investigates why language models imitate incorrect demonstrations in few-shot contexts, introducing the concepts of overthinking and false induction heads. By applying a logit-lens analysis to intermediate layers and using a permuted-labels contrast, it locates a critical layer where incorrect information begins to dominate and shows that late-attention heads drive this effect. They demonstrate causality by zeroing late layers and ablating false induction heads, achieving substantial reduction in the accuracy gap across multiple datasets with minimal impact on correct-prompt performance. The findings offer a scalable, intermediate-level framework for understanding and mitigating harmful in-context learning behaviors, with implications for prompt design and guardrail strategies.
Abstract
Modern language models can imitate complex patterns through few-shot learning, enabling them to complete challenging tasks without fine-tuning. However, imitation can also lead models to reproduce inaccuracies or harmful content if present in the context. We study harmful imitation through the lens of a model's internal representations, and identify two related phenomena: "overthinking" and "false induction heads". The first phenomenon, overthinking, appears when we decode predictions from intermediate layers, given correct vs. incorrect few-shot demonstrations. At early layers, both demonstrations induce similar model behavior, but the behavior diverges sharply at some "critical layer", after which the accuracy given incorrect demonstrations progressively decreases. The second phenomenon, false induction heads, are a possible mechanistic cause of overthinking: these are heads in late layers that attend to and copy false information from previous demonstrations, and whose ablation reduces overthinking. Beyond scientific understanding, our results suggest that studying intermediate model computations could be a promising avenue for understanding and guarding against harmful model behaviors.
