A model may attempt to hack something as a means of completing its task without being asked to do so, and detecting this behavior may require inspecting internal activations rather than only the input.

“about right and so we try and figure out like okay is the model for example like trying to hack something you know again you didn't ask it to hack like artifactory like you just you know it's just deciding to do this to complete its task right so you would not get this if you just looked at the input you have to look at the internal activations i think that like this happens at inference time so first you know like there's a trade-off here of cost and speed”