Chapter 1

What is mechanistic interpretability?

We train neural networks. We do not write them. This chapter explains why that is a problem, and what it means to "reverse engineer" a network.

In short

  • A trained network is a large set of numbers. Nobody wrote its rules by hand.
  • Mechanistic interpretability (mech interp) tries to find the algorithm that these numbers carry out.
  • The main objects are features (what the model represents) and circuits (how features connect to compute new features).
  • There are two kinds of tools. Some tools observe the model. Other tools intervene in the model to test causes.
Learning path · Chapter 1 of 12 · about 15 min · 1 widget · 2 quizzes

Before you start: No background is needed. If you know what a function and a list of numbers (a vector) are, that is enough.

You will learn:

  • why a trained network is like a program with no source code
  • what a neuron, an activation, a layer and the residual stream are
  • the three core objects of the field: features, circuits and universality
  • the difference between observing a model and intervening in it

The problem: we build what we cannot read

A normal computer program has source code. A person wrote each line. If the program does something wrong, you can read the code and find the bad line.

A neural network is different. Engineers write the training code. Then training changes millions or billions of numbers, called weights. At the end, the weights do the task. But no person chose them, and no person knows what each one does.

Large language models now write code, answer medical questions, and act as agents. We know that they work on many tests. We do not know how they work inside. This gap is the central problem of the field.

Analogy

Think of a trained network as a compiled program with no source code. The weights are like a binary file. Mechanistic interpretability tries to decompile it: to turn the binary back into code that a human can read and check.

SOFTWARE Source code compiler 0101 1100 … DEEP LEARNING Algorithm = ? 0.12 −1.7 0.03 … billions of weights data + training mechanistic interpretability
Figure 1.1. In software, people write the algorithm and a compiler makes the binary. In deep learning, training makes the "binary" (the weights) directly. Mech interp tries to go backwards.

Neural networks in five minutes

You need only a few ideas to follow this survey. We explain them here with simple words.

A neuron

A neuron takes some input numbers. It multiplies each input by a weight. It adds the results together, plus a constant called the bias. Then it applies a simple function. The most common function is ReLU: keep the number if it is positive, else output zero.

output = ReLU( w₁·x₁ + w₂·x₂ + w₃·x₃ + b )

The output of the neuron is its activation. Try the widget below. Move the inputs and see how the activation changes.

Interactive · One neuron
Weights are fixed (they were "learned"). Inputs change with each example. Line thickness shows weight size. Orange means positive, blue means negative.

Layers and activations

A layer is many neurons side by side. A network is many layers in a row. The first layer reads the input (pixels or words). Each next layer reads the activations of the layer before it. The last layer gives the output.

For one input, each layer produces a list of numbers: its activations. A list of numbers is a vector. If a layer has 512 neurons, its activation is a point in a space with 512 dimensions. Much of this survey is about the geometry of that space: which directions mean what.

Key idea

Weights are fixed after training. They are the program. Activations change with each input. They are the data that the program computes on. Mech interp studies both.

Training

Training shows the network many examples. For each example, it measures the error. Then it moves every weight a little to make the error smaller. It uses the gradient to find the right direction. After millions of steps, the network does the task. But training only optimizes the error. It does not care if the result is easy for humans to read.

Transformers

Modern language models are transformers. They read text as tokens (words or parts of words). Each token has a vector that flows through the model. This vector is called the residual stream. Two kinds of blocks read and write it: attention heads move information between tokens, and MLPs process each token on its own. Chapter 4 explains this in detail.

What "mechanistic" means

Interpretability is a large field. Many methods explain what a model does, or which input parts mattered. Mechanistic interpretability asks a stronger question: what algorithm runs inside, step by step?

ApproachQuestion it asksExample
Behavioural testingWhat does the model do on these inputs?Benchmarks, red-teaming
AttributionWhich parts of the input mattered for this output?Saliency maps, SHAP, Integrated Gradients
ProbingIs information X present in this layer?Linear probe for "is this sentence true?"
MechanisticWhich internal parts compute the output, and how?The induction-head circuit; the IOI circuit; attribution graphs

The term "mechanistic interpretability" comes from Chris Olah and his collaborators. It became common from about 2020. The line between the approaches is not sharp. Mech interp uses probes and attributions as tools. But its goal is a causal, step-by-step story that you can check.

Example of a mechanistic claim

"In GPT-2 small, head 9.9 (one of several 'name mover' heads) copies the name of the indirect object to the final position. Heads 7.3, 7.9, 8.6 and 8.10 tell head 9.9 to not attend to the repeated name." This claim names parts, says what each part does, and can be tested by switching parts off. (Chapter 6 explains it.)

The three core objects: features, circuits, universality

In 2020, Chris Olah and colleagues wrote "Zoom In: An Introduction to Circuits". It made three claims. These claims are still the base of the field.

1 · Features

Features are the basic units of a network. They are directions in activation space. Examples: a curve detector, a "French text" feature. They can be studied and understood.

2 · Circuits

Features connect through weights to form circuits. A circuit computes new features from old ones. Example: curve detectors plus edge detectors build circle detectors.

3 · Universality

Similar features and circuits form in different models trained on similar tasks. If this is true, what we learn in one model transfers to others.

The authors called these claims "speculative". Later work refined the first claim. Most features found so far are directions, but some are not single directions. For example, some language models store days of the week and months on a circle in a small subspace (Engels et al., 2024).

LAYER 1 LAYER 2 LAYER 3 curve ◜ curve ◞ straight edge circle spoke wheel orange = positive weight (excite) · dashed blue = negative weight (inhibit)
Figure 1.2. A cartoon circuit. Features in one layer combine through weights into new features in the next layer. This picture is simplified, but real circuits of this kind were found in the InceptionV1 vision model (Chapter 2).

The story would be simple if each neuron were one feature. Sadly, this is often false. Many neurons respond to several unrelated things. This is called polysemanticity. The main explanation is superposition: the model stores more features than it has neurons. Much of the modern field is a fight with superposition. Chapter 3 explains it, and Chapter 8 shows the main tool to undo it.

The toolbox: observe, then intervene

Mech interp methods fall into two groups.

Good research uses both. Observation gives a hypothesis. Intervention tests it. A probe can find information that the model never uses. Only an intervention shows that the model uses it.

OBSERVE — what is represented? INTERVENE — what causes the output? Feature visualization Saliency / attribution Probing Logit lens Dictionary learning (sparse autoencoders) Ablation Activation patching Path patching Causal scrubbing / DAS Steering (add a vector, watch behaviour change) finds candidate features & hypotheses tests whether they matter Circuit discovery & attribution graphs (both together)
Figure 1.3. The method map for this survey. Click a box to go to its chapter.

Why does this matter?

People study mech interp for several reasons.

  1. Safety. A model could look good on tests but have hidden goals or unsafe knowledge. If we can read its internal reasoning, we can find problems that tests miss. This is the main reason for much of the funding in the field.
  2. Trust and debugging. If a model fails, we want to know why. Knowing the mechanism helps us fix the cause, not only the symptom.
  3. Science. Neural networks learn real structure from data. Reading them may teach us new facts about language, vision, or even biology. It is also a new kind of science: we have full access to every weight, unlike in neuroscience.
  4. Control. If we know which direction means "refuse" or "Golden Gate Bridge", we can turn it up or down. This gives new ways to steer models.
Honest limit

Mech interp has made real progress, but it is far from complete. Today we can explain small parts of large models, or most of very small models. We cannot yet give a full account of a frontier model. Chapter 11 covers the open debates.

A useful comparison: neuroscience

Neuroscientists study brains. They record neurons, damage regions, and stimulate cells. Mech interp uses the same moves: we record activations, ablate components, and add steering vectors. But we have three big advantages.

Chris Olah listed advantages like these in a 2021 note, "Interpretability vs Neuroscience". He argued that researchers should use them "as ruthlessly as possible". Still, the problems are hard. A large model has billions of parameters, and the features we care about are often spread across many neurons.

How to read this survey

The chapters follow the history of the field. Each chapter starts with a short summary and ends with a quiz. Underlined words show a definition when you hover over them. Boxes with an orange dot are interactive.

What is the main difference between mechanistic interpretability and attribution methods such as saliency maps?
Saliency and other attribution methods point to important input parts. They do not say how the model used them. Mech interp tries to identify the internal features and circuits and test them causally.
A probe can read "is this text in French?" from layer 6 with 99% accuracy. What does this prove?
Probes are observational. To show use, you must intervene, for example by removing that direction and checking if behaviour changes. Chapter 7 covers this in detail.
Key takeaways
  • A trained network is a large set of learned numbers (weights). Nobody wrote its algorithm, so we must reverse engineer it.
  • Mech interp looks for features (what the model represents, usually directions in activation space) and circuits (how features connect through weights).
  • Universality is the hope that similar features and circuits appear in many models, so that lessons transfer.
  • Many neurons mix unrelated concepts (polysemanticity). The main explanation is superposition.
  • Observation gives a hypothesis. Only an intervention shows that the model uses something.

Where this leads: Chapter 2 starts the history, with vision models from 2013. If you only care about language models, skim it and go to Chapter 3 (superposition) and Chapter 4 (transformers).