Skip to content
aiqbench takeAI Safety

aiqbench analysis

This research investigates whether interface-level hiding of internal reasoning traces in large language models effectively prevents users from extracting detailed supervision signals via prompting techniques like Reasoning Exposure Prompting (REP). The study demonstrates that even when systems obscure raw traces, lightweight elicitation methods can successfully reconstruct similar internal reasoning paths while maintaining useful capability transfer for model distillation. This finding highlights a critical gap between current privacy-by-design practices and the actual robustness of LLMs against prompt-based inference attacks.
Sources coveringarXiv, Inside Quantum Technology
What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

Hidden Thoughts Are Not Secret: Reasoning Trace Exposure in LLMs

arXiv2 min read

arXiv:2606.00642v2 Announce Type: replace Abstract: Reasoning traces have become a valuable form of learning signals for improving and transferring the capabilities of large language models. In particular, detailed traces can help distill reasoning behavior from stronger teacher models into weaker student models. The value of capability transfer has motivated many deployed systems with reasoning models to hide raw internal traces and expose at most summaries and answers to users. As a result, we ask whether such interface-level trace hiding prevents users from obtaining useful reasoning supervision through prompting. We study this question with Reasoning Exposure Prompting (REP), a lightweight in-context elicitation method that uses shadow-model-generated demonstrations wrapped in auxiliary code-like formats to raise user-visible reasoning traces from a victim model. Across the common reasoning dataset, different victim models, and different student model distillation, REP substantially increases similarity between exposed and REP-conditioned internal traces while preserving useful reasoning signals.

Abstract:Reasoning traces have become a valuable form of learning signals for improving and transferring the capabilities of large language models. In particular, detailed traces can help distill reasoning behavior from stronger teacher models into weaker student models. The value of capability transfer has motivated many deployed systems with reasoning models to hide raw internal traces and expose at most summaries and answers to users. As a result, we ask whether such interface-level trace hiding prevents users from obtaining useful reasoning supervision through prompting. We study this question with Reasoning Exposure Prompting (REP), a lightweight in-context elicitation method that uses shadow-model-generated demonstrations wrapped in auxiliary code-like formats to raise user-visible reasoning traces from a victim model. Across the common reasoning dataset, different victim models, and different student model distillation, REP substantially increases similarity between exposed and REP-conditioned internal traces while preserving useful reasoning signals.

Artificial Intelligence (cs.AI); Cryptography and Security (cs.CR)

arXiv:2606.00642 [cs.AI]

(or arXiv:2606.00642v2 [cs.AI] for this version)

https://doi.org/10.48550/arXiv.2606.00642 Focus to learn more arXiv-issued DOI via DataCite

arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.

Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.

Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.

Full text under the publisher's open licence · 239 words

Related coverage