aiqbench analysis
This research investigates whether interface-level hiding of internal reasoning traces in large language models effectively prevents users from extracting detailed supervision signals via prompting techniques like Reasoning Exposure Prompting (REP). The study demonstrates that even when systems obscure raw traces, lightweight elicitation methods can successfully reconstruct similar internal reasoning paths while maintaining useful capability transfer for model distillation. This finding highlights a critical gap between current privacy-by-design practices and the actual robustness of LLMs against prompt-based inference attacks.
Hidden Thoughts Are Not Secret: Reasoning Trace Exposure in LLMs
arXiv:2606.00642v2 Announce Type: replace Abstract: Reasoning traces have become a valuable form of learning signals for improving and transferring the capabilities of large language models. In particular, detailed traces can help distill reasoning behavior from stronger teacher models into weaker student models. The value of capability transfer has motivated many deployed systems with reasoning models to hide raw internal traces and expose at most summaries and answers to users. As a result, we ask whether such interface-level trace hiding prevents users from obtaining useful reasoning supervision through prompting. We study this question with Reasoning Exposure Prompting (REP), a lightweight in-context elicitation method that uses shadow-model-generated demonstrations wrapped in auxiliary code-like formats to raise user-visible reasoning traces from a victim model. Across the common reasoning dataset, different victim models, and different student model distillation, REP substantially increases similarity between exposed and REP-conditioned internal traces while preserving useful reasoning signals.
Abstract:Reasoning traces have become a valuable form of learning signals for improving and transferring the capabilities of large language models. In particular, detailed traces can help distill reasoning behavior from stronger teacher models into weaker student models. The value of capability transfer has motivated many deployed systems with reasoning models to hide raw internal traces and expose at most summaries and answers to users. As a result, we ask whether such interface-level trace hiding prevents users from obtaining useful reasoning supervision through prompting. We study this question with Reasoning Exposure Prompting (REP), a lightweight in-context elicitation method that uses shadow-model-generated demonstrations wrapped in auxiliary code-like formats to raise user-visible reasoning traces from a victim model. Across the common reasoning dataset, different victim models, and different student model distillation, REP substantially increases similarity between exposed and REP-conditioned internal traces while preserving useful reasoning signals.
Artificial Intelligence (cs.AI); Cryptography and Security (cs.CR)
arXiv:2606.00642 [cs.AI]
(or arXiv:2606.00642v2 [cs.AI] for this version)
https://doi.org/10.48550/arXiv.2606.00642 Focus to learn more arXiv-issued DOI via DataCite
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 239 words
Related coverage

Game Design Creativity evals
LessWrong · Oct 12, 2026

An unexamined cause of the OpenAI Hugging Face hacking incident: its binary performance metric
LessWrong · Sep 23, 2026

Infected Vibe-Coding: How Does an AI react to a Prompt Injection from a Different AI?
LessWrong · Jul 30, 2026

[AINews] not much happened today
Latent Space · Sep 18, 2026