aiqbench analysis
This research investigates the internal mechanisms of stereotypes in multilingual large language models by comparing linear probing, attribution patching, and sparse autoencoders across Llama-3.1, Qwen3, and Gemma-2. The study reveals that probe performance peaks significantly earlier than attribution signals within model depth and highlights distinct variations in feature ablation effects across different SAE suites. These findings underscore the necessity of measuring decodability, output influence, and cross-lingual ablation effects separately to fully understand how stereotypes are represented and activated.
Tracing Stereotypes from Representation to Output in Multilingual LLMs
arXiv:2609.08322v1 Announce Type: new Abstract: Multilingual LLMs show stereotype-related behavior that varies across languages, but behavioral scores do not show where the relevant information is represented or how it affects the output. To investigate these internal mechanisms, we compare linear probing, attribution patching, sparse autoencoders (SAEs) and feature ablation in Llama-3.1-8B, Qwen3-8B, and Gemma-2-9B. Probe performance peaks substantially earlier than attribution in all three models, with a separation of 36-53% of model depth. Retained Llama-Scope features often match the social category on which they were selected and form recurring semantic families, but their lexical alignment and ablation effects vary across SAE suites. Only 6-18% of evaluated residual-stream features have language-agnostic effects under our criterion, and none are category-agnostic. Language-agnostic features have larger mean ablation effects in Llama-Scope, but this pattern does not repeat in the other SAE suites. Decodability, output influence, and cross-lingual ablation effects therefore need to be measured separately.
Abstract:Multilingual LLMs show stereotype-related behavior that varies across languages, but behavioral scores do not show where the relevant information is represented or how it affects the output. To investigate these internal mechanisms, we compare linear probing, attribution patching, sparse autoencoders (SAEs) and feature ablation in Llama-3.1-8B, Qwen3-8B, and Gemma-2-9B. Probe performance peaks substantially earlier than attribution in all three models, with a separation of 36-53% of model depth. Retained Llama-Scope features often match the social category on which they were selected and form recurring semantic families, but their lexical alignment and ablation effects vary across SAE suites. Only 6-18% of evaluated residual-stream features have language-agnostic effects under our criterion, and none are category-agnostic. Language-agnostic features have larger mean ablation effects in Llama-Scope, but this pattern does not repeat in the other SAE suites. Decodability, output influence, and cross-lingual ablation effects therefore need to be measured separately.
18 pages total (9 pages main text), 13 figures. Accepted to EMNLP 2026
Computation and Language (cs.CL); Artificial Intelligence (cs.AI)
arXiv:2609.08322 [cs.CL]
(or arXiv:2609.08322v1 [cs.CL] for this version)
https://doi.org/10.48550/arXiv.2609.08322 Focus to learn more arXiv-issued DOI via DataCite (pending registration)
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 257 words
Related coverage
Beyond English: Uncovering the Multilingual Gap in Vision-Language-Action Models
arXiv · Jun 17, 2026
Disentangled Contrastive Learning for Zero-Shot Multilingual Dense Retrieval
arXiv · Aug 4, 2026
PAINT: A Framework for Multilingual Pain Representation from Medical Licensing Exams to Real-World Clinical Texts
arXiv · Oct 14, 2026
One Jailbreak, Many Tongues: Learning Language-Insensitive Intention Representations for Multilingual Jailbreak Detection
arXiv · Jun 11, 2026