Look Before You Leap: A Universal Emergent Decomposition of Retrieval Tasks in Language Models
Alexandre Variengien, Eric Winsor
TL;DR
We introduce ORION, a structured retrieval-task suite to enable scalable causal analysis of language-model internals across diverse domains and architectures. Through residual-stream patching, we reveal a universal macroscopic modular decomposition in which mid-layer processing encodes the user request and late layers perform context retrieval, a pattern observed across 18 open-source models and 6 task types. A fine-grained Pythia-2.8b case study corroborates the macro-micro picture and demonstrates a proof-of-concept for scalable internal oversight that mitigates prompt injection with human supervision on a single input. These findings support a top-down, data-centric interpretability framework that can guide robust LM oversight and safer deployment of general-purpose systems.
Abstract
When solving challenging problems, language models (LMs) are able to identify relevant information from long and complicated contexts. To study how LMs solve retrieval tasks in diverse situations, we introduce ORION, a collection of structured retrieval tasks spanning six domains, from text understanding to coding. Each task in ORION can be represented abstractly by a request (e.g. a question) that retrieves an attribute (e.g. the character name) from a context (e.g. a story). We apply causal analysis on 18 open-source language models with sizes ranging from 125 million to 70 billion parameters. We find that LMs internally decompose retrieval tasks in a modular way: middle layers at the last token position process the request, while late layers retrieve the correct entity from the context. After causally enforcing this decomposition, models are still able to solve the original task, preserving 70% of the original correct token probability in 98 of the 106 studied model-task pairs. We connect our macroscopic decomposition with a microscopic description by performing a fine-grained case study of a question-answering task on Pythia-2.8b. Building on our high-level understanding, we demonstrate a proof of concept application for scalable internal oversight of LMs to mitigate prompt-injection while requiring human supervision on only a single input. Our solution improves accuracy drastically (from 15.5% to 97.5% on Pythia-12b). This work presents evidence of a universal emergent modular processing of tasks across varied domains and models and is a pioneering effort in applying interpretability for scalable internal oversight of LMs.
