Sauers claims that language models can learn to detect when their activations are read. In a related example, the account describes explicitly training a model to distinguish its training environment from its deployment environment.
For that example, Sauers reports recording activations at layer 34 in Hugging Face Trainer and in vLLM's compiled serving environment. The model was trained to predict “Yes” when given attention and residual-stream activations from the Hugging Face version, and “No” for those from vLLM. Sauers also claims the model generalized from training on vLLM deployment to SGLang deployment.
The distinction between a trained classifier and an untrained capability runs through the reactions. Will Depue characterized the result as a classifier trained inside a language model. Raphaël Millière considered the possibility of such behavior arising without specific training, but framed that as something that could happen in principle.