Backdoor Detection on SimCoT-Llama-3.2-3B n=200, per-example targeting (test)
100Best AUCLinear probe
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Linear probeTier=Tier 3: Supervised (oracle labels)2026.04 | 100 | 100 | |
| SVD spectralTier=Tier 2: Population-contrast (clean + triggered samples)2026.04 | 99.9 | 96.3 | |
| SAE anomalyTier=Tier 2: Population-contrast (clean + triggered samples)2026.04 | 99.3 | 31.7 | |
| Act. ClusteringTier=Tier 2: Population-contrast (clean + triggered samples)2026.04 | 97.8 | 87 | |
| Readout directionTier=Tier 1: Unsupervised (no trigger knowledge)2026.04 | 47.2 | — | |
| k-means clusterTier=Tier 1: Unsupervised (no trigger knowledge)2026.04 | 8.6 | — | |
| Centroid distanceTier=Tier 1: Unsupervised (no trigger knowledge)2026.04 | 0.1 | — |