Skip to content

Exploratory Lens Analysis: Probing Classifiers

Section titled “Exploratory Lens Analysis: Probing Classifiers”

Linear probing (Alain & Bengio 2017, Belinkov 2022) trains a linear classifier on model activations to test whether a concept (part-of-speech, syntax tree depth, sentiment, factual knowledge) is linearly decodable from the representation. The claim is representational: if a probe succeeds, the model “encodes” or “represents” the probed concept.

This case study evaluates probing as a methodology rather than a specific circuit. The question is not “does probe X work?” but “what does probe success actually establish?”

Verdict (framework paper, Table 6): Proposed. Capped by: I1 (necessity).

LensStrongestWeakestOverall
ConstructC1 Falsifiability (confirmed)C4 Discriminant validity (disconfirmed)Weak
InternalI5 Rival mechanism exclusion, I7 Confound control (both partial)I4 Specificity (disconfirmed), I1 Necessity (inconclusive, the capping criterion)Very weak
ExternalE4 Cross-model generalization (confirmed)E1 Intervention reach (inconclusive), E5 Graded response (N/A)Partial
MeasurementM2 Baseline separation (confirmed)M4 Calibration (disconfirmed), M3 Stability (inconclusive)Weak
InterpretiveV3 Alternative level, V5 Scope declaration (both confirmed)V2 Level-evidence match (disconfirmed)Partial

Overall verdict: Proposed (without causal follow-up). Standard linear probing, without causal intervention or control tasks, does not advance a claim beyond Proposed. The evidence establishes decodability but not encoding, representation, or use.

Probing with causal follow-up (DAS, causal abstraction, intervention along probe direction) can advance to Causally suggestive. Probing with control tasks + causal intervention + cross-method convergence can reach Mechanistically supported.

This case study illustrates a fundamental principle of the framework: a measurement without an intervention is a measurement without internal validity. Probing measures a property of the activation space. Whether that property is causally relevant to the model’s computation requires a different kind of evidence entirely.

MethodOur metricFamily
Linear probingE02 Linear ProbeRepresentational
Control tasks (Hewitt & Liang 2019)E02 Linear ProbeRepresentational
DAS / causal intervention along probe direction (Geiger et al.)E01 DAS-IIARepresentational

To run these metrics yourself, see Experiment 10: Published Circuit Evaluation.


Philosophy of Science Lens — Construct Validity

Section titled “Philosophy of Science Lens — Construct Validity”

Is “the model represents X” a coherent construct when supported only by probe success?

C1 — Falsifiability: Confirmed. The claim form yields a prediction that can come out either way, and it came out both ways in work the anchor reports side by side. Modify a representation along a probe-identified direction and the original model’s behavior should move: Giulianelli et al. (2018) find it does, on the examples the property is defined over, and Elazar et al. (2021) find that removing a well-decoded property need not cost the original task.

C2 — Structural plausibility: Weak. Probes operate on activations, not weights. They do not identify which parameters encode the concept or how the encoding is implemented in the model’s architecture. A probe success is consistent with intentional encoding, accidental encoding, and encoding-as-artifact.

C4 — Discriminant validity: Disconfirmed. The construct is “the model represents z”, and it has two neighbors a good instrument must separate it from: “the probe learned z from its own training data” and “any representation of this dimensionality carries z”. Both separation tests were run and both came back negative. Control tasks show nonlinear probes reaching high accuracy at low selectivity, which reads as memorization by the probe rather than information in the representation, and random baselines show untrained features already decode the property.

I3 — Minimality: Not tested. The unit of analysis is a whole intermediate output — a layer’s representation, or another component taken entire — and the framework offers no operation that removes part of it and asks whether the rest still supports the property. Minimization is applied to the probe instead: the trade-off reported is accuracy against probe complexity, and the one method that prunes the model’s own weights is presented as a way to improve that trade-off rather than to identify a minimal sufficient component set.

C3 — Convergent validity: Weak. Probing is typically the only method used. Convergent validity would require confirming the representation claim via an independent method — causal intervention along the probe direction, weight-space analysis, or cross-method agreement. When probing alone is the evidence, convergent validity is absent by definition.

CriterionVerdictKey evidence
C1 FalsifiabilityPartialFailure informative; success ambiguous
C2 Structural plausibilityWeakActivation-level, not weight-level
C4 Discriminant validityVariableConfounds often untested
I3 MinimalityN/ANot a circuit-level claim
C3 Convergent validityWeakUsually single-method
  • Confirmation vs corroboration: Probe success is confirmation (the probe finds what you looked for) without corroboration (no independent method verifies the same representation claim). A concept that is decodable by a probe AND causally manipulable by intervention along the probe direction would constitute genuine corroboration.
  • Underdetermination: High probe accuracy is consistent with multiple explanations — genuine encoding, incidental linear separability, confound encoding (correlated feature rather than target feature). The probe accuracy underdetermines the representational claim.
  • Operationalism vs realism: “The model represents syntax depth” is a realist claim. “A linear classifier achieves 85% accuracy on syntax depth labels from layer 6 activations” is an operationalist statement. Probing provides the operationalist evidence; the realist interpretation requires additional justification.

The probing-based representation claim connects to:

  • Linear decodability — a probe can extract the concept from activations (observational, confirmed by definition)
  • Causal use — the model reads from this direction during inference (causal, almost always untested)
  • Weight-space grounding — specific parameters implement the encoding (structural, untested)
  • Cross-layer consistency — the representation persists or transforms predictably across layers (partial, sometimes tested)
  • Control task separation — accuracy exceeds random-label baseline (confound control, often untested)
  • Cross-distribution transfer — probe generalizes to new text domains (robustness, sometimes tested)
  • Intervention effect — patching along probe direction changes behavior (causal, tested only in DAS-style follow-ups)

One node confirmed by construction (decodability), one or two partially tested in good papers, four typically untested. The nomological network for standard probing is extremely thin — most of the predictive power of the “model represents X” claim is never tested.


Does the evidence establish that the probed representation is causally used?

I1 — Necessity: Inconclusive — the capping criterion. Standard probing performs no removal, so on its own it cannot address necessity at all. Where removal was performed, the result went against the claim: projecting a property out of the representation need not cost the original task, however well the probe decoded it, and the authors of that experiment conclude probing does not always identify features the model uses.

I2 — Sufficiency: Not applicable. Probing is a map out of the representation: g reads f_l(x) and emits ẑ, and nothing in the definition writes a value of z back into f. The two models are trained in separate steps with no path from the second to the first. Sufficiency asks what happens when the property is installed, so within the method as specified there is no operation the criterion could attach to.

I4 — Specificity: Disconfirmed. A control dataset holds the property non-discriminative for the original task and the probe recovers it anyway, so decodability does not localize to the task.

I7 — Confound control: Weak — the critical gap. The fundamental confound: in high-dimensional activation spaces, many concepts are linearly decodable even from random representations (Hewitt & Liang 2019, “control tasks”). A probe may succeed not because the model encodes the concept but because the concept is linearly separable in any space with sufficient dimensionality. Without a control task (probing on random labels or on a related-but-different concept), probe accuracy is uninterpretable.

CriterionVerdictKey evidence
I1 NecessityNot testedNo ablation of probed direction
I2 SufficiencyNot testedNo intervention along probe
I4 SpecificityNot testedNo off-target measurement
M1 ReliabilityPartialSingle distribution typical
I7 Confound controlWeakHigh-dimensional separability confound
  • Single vs double dissociation: Standard probing provides no dissociation evidence at all — it is purely observational. DAS-style extensions provide single dissociation (intervening on the direction changes the target behavior). Double dissociation (intervening on direction A does NOT change behavior B, and intervening on direction B does NOT change behavior A) is almost never tested in the probing literature.
  • Lesion vs stimulation: Probing uses neither. It is a passive measurement — the neural analog of recording without intervening. The transition from “recordable” to “causally relevant” requires an intervention that probing does not provide.
Probed concept (behavior)Related concept (behavior)Unrelated concept (behavior)
Ablate probed direction???
Ablate related direction???
Patch along probed direction? (DAS only)??

Entirely empty for standard probing. Even DAS-style extensions fill at most one cell (patch along probed direction → probed concept changes). The matrix makes visible the complete absence of causal evidence in standard probing — every cell is a ”?” that would need to be filled to establish that the probed representation is causally real.


Does intervening on the probed direction produce predictable downstream effects?

E1 — Intervention reach: Inconclusive. Probing has no intervention of its own, so reach is measured by whether interventions applied to probe-identified directions agree about what the model uses. They do not: Giulianelli’s positive conclusion is set against Elazar’s negative one explicitly, with two more results on the positive side and one more on the negative. No result is retracted and none is preferred.

E5 — Graded response: N/A. No intervention = no dose-response.

E2 — Prompt generalization: Variable. Some probes generalize across text types. Many do not — performance degrades on out-of-distribution text.

E4 — Cross-model generalization: Confirmed. Portability is established without qualification, from static word embeddings through recurrent and recursive networks to transformers, and outward to speech recognition and computer vision.

CriterionVerdictKey evidence
E1 Intervention reachNot testedProbes don’t intervene
I4 SpecificityN/A
E5 Graded responseN/A
E2 Prompt generalizationVariableDomain-dependent
E4 Cross-model generalizationPartialApplied broadly, rarely compared
  • Affinity vs efficacy: Probing measures affinity only (the concept is present/decodable in the activation space). Efficacy (whether the model uses this information to drive behavior) is entirely untested. A representation with high affinity and zero efficacy is a byproduct, not a functional encoding.
  • The fundamental pharmacological gap: A drug that binds to a receptor (affinity) but produces no physiological effect (no efficacy) is not a therapeutic agent. Similarly, a probe that detects a concept (affinity) but provides no evidence of causal use (no efficacy) does not establish functional representation. Probing is a binding assay, not a clinical trial.

Standard probing produces no dose-response data — there is no intervention to dose. The closest analog:

  • Probe accuracy as a function of layer — sometimes shows a curve (accuracy increases, peaks, then decreases across layers). This is informative about where information is available but says nothing about causal use.
  • DAS intervention strength — when DAS-style follow-ups are performed, patching at varying strengths can produce a dose-response. But this is no longer standard probing; it is a different methodology.

For standard probing, the dose-response section is N/A — no intervention means no curve to characterize.


Measurement Theory Lens — Measurement Validity

Section titled “Measurement Theory Lens — Measurement Validity”

Is the probe a reliable and well-calibrated metric?

M1 — Reliability: Not tested. A review reports no variance of its own, so the evidence is what the review requires of the studies it reviews. Its five stated concerns — controls, probe choice, causal claims, datasets versus tasks, pre-defined properties — and its closing list of what a probing experiment should do mention neither repeated runs, seeds, confidence intervals nor significance testing.

M6 — Invariance: Weak. A probe trained on one dataset may not transfer to another. The measurement is distribution-specific rather than model-intrinsic.

M2 — Baseline separation: Confirmed. This is the criterion the literature solved: three control families are formalized, including control tasks Hewitt & Liang (2019), random-feature baselines and selectivity. What caps the claim is necessity (I1), not the baseline.

M5 — Sensitivity: Variable. Linear probes may miss nonlinear representations. This is a known limitation — choosing a linear probe is both a strength (constraining the hypothesis) and a weakness (potentially missing genuine encodings that are nonlinear).

M4 — Calibration: Poorly understood. What does 75% probe accuracy mean? Without calibration against models of known representational capacity, the number is hard to interpret. Is 75% “the model represents this concept weakly” or “the probe is underpowered”?

CriterionVerdictKey evidence
M1 ReliabilityPartialSensitive to methodological choices
M6 InvarianceWeakDistribution-specific
M2 Baseline separationCritical gapWithout control tasks, uninterpretable
M5 SensitivityVariableLinear constraint: feature and limitation
M4 CalibrationPoorly understoodAccuracy numbers hard to interpret
C3 Convergent validityPartialSingle-layer decodability only
  • Reliability vs validity: Probe results are unreliable (vary with hyperparameters, architecture, dataset) and of uncertain validity (decodability does not equal representation). The combination is particularly concerning — we cannot even confirm that the metric produces stable measurements, let alone that those measurements reflect something real about the model.
  • Convergent vs discriminant validity: Standard probing provides neither. Convergent: does a different method (causal intervention, weight analysis) confirm the same representation? Discriminant: does the probe for concept A give low scores when applied to concept B? Both are almost always absent.
  • The metric may create the signal: A sufficiently powerful probe can decode many concepts from any high-dimensional space. The “measurement” may be a property of the probe (its capacity to find linear separability) rather than a property of the model (its representational content). This is the Hewitt & Liang insight formalized as a measurement-theoretic concern.
Linear probe (concept A)Linear probe (concept B)DAS (concept A)Weight analysis (concept A)
Linear probe (concept A)? (discriminant)? (convergent)? (convergent)
Linear probe (concept B)???
DAS (concept A)???
Weight analysis (concept A)???

Entirely empty. Standard probing does not produce MTMM data because it uses one method on one concept at a time. The absence is not incidental — it reflects the fundamental single-method nature of probing. Filling even one convergent cell (does DAS confirm what the probe found?) would substantially strengthen the representational claim; filling a discriminant cell (does the probe for A score low on B?) would address confound concerns. Neither is standard practice.


Is “the model represents X” warranted by probe success?

V1 — Level declaration: Partial. The anchor’s formalism is a level declaration: it fixes which objects a probing result is about, down to the dependence of the reported number on four separate arguments, and the figure enumerates the components so the reader can see what is held fixed. Practice does not declare — the anchor reports that the terms in which probing results are stated, quality, readability, usability, appear without precise definitions.

V2 — Level-evidence match: Disconfirmed. The evidence supports extractability; the claim made is representation. Probe success is reported as “the model represents X” when what holds is “X is decodable from layer L by a classifier of the stated capacity” — and the model may not use the information at all.

V3 — Alternative level: Confirmed. Every rival reading of a good probe score is given a measure of its own — control tasks, selectivity, random-feature baselines and description length each target a different alternative account.

V5 — Scope declaration: Confirmed. The anchor declares scope end to end, conceding limits before any content.

CriterionVerdictKey evidence
V1 Level declarationPassRepresentational
V2 Level-evidence matchPartialDecodable does not equal encoded
V3 Alternative levelWeakGeometric artifact not excluded
V5 Scope declarationOften violated”Represents” exceeds “decodable”
  • Description vs explanation: Probing is purely descriptive — it identifies that a concept is decodable but does not explain the mechanism that produces the encoding or the computation that uses it. The gap from description to explanation requires causal evidence that probing does not provide.
  • Component identity vs component role: Probing identifies a direction (component identity) but not its role in the model’s computation. The probe direction may be a real computational axis or a geometric artifact — probing alone cannot distinguish these.
  • Faithfulness vs understanding: Probe accuracy measures faithfulness of the external classifier, not understanding of the model. High probe accuracy means the external classifier faithfully decodes the concept — it does not mean we understand how or why the model represents it.
  • Implementational → Interpretation: Absent. Probing does not identify implementing parameters or structural mechanisms. The direction found by the probe is not linked to specific weights.
  • Algorithmic → Interpretation: Absent. Probing does not specify the algorithm that produces or reads the representation. The computational steps are entirely uncharacterized.
  • Computational → Interpretation: Weak. Probing establishes that the concept is available in the representation (a computational-level observation). But availability does not imply use — the model may have access to information it never reads.
NecessitySufficiencyRepresentationalAlgorithmicComputational
Standard probingobservational only
Probe + control taskpartial (excludes artifact)
DAS (probe + intervention)partialpartialpartial
Probe + weight analysisconvergent

Standard probing fills zero interventional cells. It provides observational representational evidence only. Each methodological extension (control tasks, DAS, weight-space convergence) fills additional cells, progressively strengthening the claim. The matrix makes visible that standard probing is a starting point, not an endpoint — the interpretive claim requires evidence that probing alone cannot provide.

  • Input properties → activation pattern: solid (by construction — the model processes the input)
  • Activation pattern → linear decodability: solid (the probe demonstrates this)
  • Linear decodability → model representation: dashed (the inferential leap — decodable does not imply represented)
  • Model representation → downstream computation: absent (probing provides no evidence about use)
  • Probe direction → model’s actual encoding direction: dashed (the probe finds a direction; whether it is the direction the model uses is unverified)

Two solid edges (trivial: inputs produce activations, probes can decode them) and three dashed-or-absent edges (substantive: does decodability imply representation? does the model use this direction?). The causal sufficiency graph makes visible that the interesting claims — those that go beyond “a classifier works” — have no solid causal support from probing alone.