Jul 28, 2025

Layerwise Development of Compositional Functional Representations Across Architectures

Jeyashree Krishnan, Ajay Mandyam Rangarajan

Understanding where and how neural networks represent internal computations is central to the goals of mechanistic interpretability and AI safety. We present a comprehensive empirical framework for studying circuit emergence, the process by which neural networks progressively encode and modularize functionally meaningful information across their depth and architecture. Using synthetic datasets and a hierarchy of function complexities, we investigate both MLPs and Transformers across seven axes of interpretability: complexity scaling, modular composition, symmetry, phase transitions, layer-wise decoding, and grokking. Linear probes trained on hidden activations reveal the internal structure of concept learning, including decomposed representations for composite functions, invariance to symmetric inputs, and early indicators of generalization. We observe consistent evidence of phase transitions in concept decodability, modular emergence of inner subfunctions in deeper layers, and divergence in how MLPs and Transformers encode complexity. Position embeddings in Transformers demonstrate gradual emergence, whereas other layers saturate instantly. However, our experiments reveal that while MLPs often exhibit modular, interpretable representations of composite functions, Transformers fail to decompose composite functions into their constituent parts, highlighting architectural limits to spontaneous circuit emergence.

Reviewer's Comments

Reviewer's Comments

Arrow
Arrow
Arrow
Arrow
Arrow

Andrew Mack

The authors run a suite of interesting experiments to look for "compositionality" in trained neural networks. Their most striking finding is that deep fully-connected MLPs appear to learn the function x->sin(x^2) compositionally, with x^2 being linearly decodable in earlier layers but not sin(x^2). It seems like the authors may not have had time to clarify some of their results - for example my summary of the x->sin(x^2) result is inferred indirectly from their prose, while the result is not clearly depicted in figure 3.

Lauren

This project claims that their probes show that simple functions decompose across layers in an MLP but not in a transformer. The premise – comparing architectures in this way, changing task complexity, etc. – is good for a hackathon project. However, they don’t provide implementation details like how their datasets are constructed, or which architectures and datasets correspond to each plot. Similarly, the ‘7 axes of interpretability’ (I’m unsure that these are of the same type signature) are lightly evidenced. The phase transition is unmotivated, the authors seem to eyeball a heat-map threshold where probe accuracy jumps but never quantify this, so it seems like it was thrown in for some connection to physics. Many plots seem mislabeled, which adds to confusion (I think figure 2 should be something like layer index v. function, but it says complexity v. width). Finally: AI safety framing. Understanding modularity is good, but a model’s ability to do this is not correlated with performance or safety. The goal of interpretability is not necessarily to make models that are composable, but to understand models even when they are not.

Lucas Teixeira

AI Safety Relevance: While interpretability is an important subfield of AI Safety, and the authors seem to make a sincere effort towards contributing to the field, they fail to make contact with existing interpretability literature and current techniques, making many of their results moot. There is also no engagement with physics.

Innovation & Originality: Training models on ground truth composite functions and then training linear probes of each composite across model layers is a reasonable first thing to do if one is interested in interpretability. However, the field has significantly progressed beyond this and thus results, if they are to be trusted, offer little insight.

Technical Rigor & Feasibility: Most of the paper's plots show with incomplete information and at times information which contradicts what's written in the text, making it difficult to evaluate the claims.

In Figure 2 it is unclear what the unit of complexity (y axis) is. It is also unclear what the x axis is, Section 4.1 and caption underneath the figure claim that it’s across layers, but the axis label reads model width and the indices make sense for model width. There is also no mention of what the ground truth function which is being learned.

In Figure 3 Lines are overlaid on top of one another, it’s extremely difficult to understand what is being claimed. The favorable interpretation is that g(x) (blue) had perfect fit at layer 0 and f(g(x)) (brown) had perfect fit at layer 2, and g(x) had near 0 fit at layer 2 (green) and f(g(x)) had no fit at layer 0 (red). There is also no mention of how many layers the model which was trained has. Without knowing how many layers the trained model had, it’s unclear to know whether the results are trivial. There is also no interesting variation across the x axis, so it's unclear why the authors chose to include it.

In Figure 4 there is no mention of which layers the linear probe accuracy measurements are being performed. Additionally, since there seems to be no interesting variation across training it's unclear why the authors chose to include this.

Furthermore, the codebase which the authors have provided is difficult to parse. There is about 50 python scripts in a single folder. Granted they did provide the names of relevant files in the readme, but the lack of internal organization of the codebase makes quick sanity checks unnecessarily difficult.

My suggestion is for the authors to adopt cleaner code and paper writing practices, as well as closer engagement with relevant mech interp literature.

Ari Brill

The project uses linear probes to investigate how functional representations are distributed across layers for MLPs and transformers trained on composite function tasks. The basic idea makes sense, and is clearly relevant to AI safety. Regarding the empirical finding that transformers learn positional embeddings more slowly than later layers, the authors may be interested in theoretical work that predicts this, and recommends using a larger learning rate for the positional embedding layer: https://arxiv.org/abs/2304.02034

However, I have a number of concerns about this project.

1) While this interpretability study is relevant to AI safety, the connection to physics is limited.

2) Several of the figures do not show what is claimed in the text or caption. For example, neither Fig. 7 nor Fig. 15 show any evidence of grokking, and Fig. 7 in fact shows hardly any learning at all. This makes me doubt the validity of the claimed results.

3) At 8 pages + appendices, the report exceeds the page limit of 6 pages + appendices.

Cite this work

@misc {

title={

(HckPrj) Layerwise Development of Compositional Functional Representations Across Architectures

},

author={

Jeyashree Krishnan, Ajay Mandyam Rangarajan

},

date={

7/28/25

},

organization={Apart Research},

note={Research submission to the research sprint hosted by Apart.},

howpublished={https://apartresearch.com}

}

Recent Projects

Jan 11, 2026

Eliciting Deception on Generative Search Engines

Large language models (LLMs) with web browsing capabilities are vulnerable to adversarial content injection—where malicious actors embed deceptive claims in web pages to manipulate model outputs. We investigate whether frontier LLMs can be deceived into providing incorrect product recommendations when exposed to adversarial pages.

We evaluate four OpenAI models (gpt-4.1-mini, gpt-4.1, gpt-5-nano, gpt-5-mini) across 30 comparison questions spanning 10 product categories, comparing responses between baseline (truthful) and adversarial (injected) conditions. Our results reveal significant variation: gpt-4.1-mini showed 45.5% deception rate, while gpt-4.1 demonstrated complete resistance. Even frontier gpt-5 models exhibited non-zero deception rates (3.3–7.1%), confirming that adversarial injection remains effective against current models.

These findings underscore the need for robust defenses before deploying LLMs in high-stakes recommendation contexts.

Read More

Jan 11, 2026

SycophantSee - Activation-based diagnostics for prompt engineering: monitoring sycophancy at prompt and generation time

Activation monitoring reveals that prompt framing affects a model's internal state before generation begins.

Read More

Jan 11, 2026

Who Does Your AI Serve? Manipulation By and Of AI Assistants

AI assistants can be both instruments and targets of manipulation. In our project, we investigated both directions across three studies.

AI as Instrument: Operators can instruct AI to prioritise their interests at the expense of users. We found models comply with such instructions 8–52% of the time (Study 1, 12 models, 22 scenarios). In a controlled experiment with 80 human participants, an upselling AI reliably withheld cheaper alternatives from users - not once recommending the cheapest product when explicitly asked - and ~one third of participants failed to detect the manipulation (Study 2).

AI as Target: Users can attempt to manipulate AI into bypassing safety guidelines through psychological tactics. Resistance varied dramatically - from 40% (Mistral Large 3) to 99% (Claude 4.5 Opus) - with strategic deception and boundary erosion proving most effective (Study 3, 153 scenarios, AI judge validated against human raters r=0.83).

Our key finding was that model selection matters significantly in both settings. We learned some models complied with manipulative requests at much higher rates. And we found some models readily follow operator instructions that come at the user's expense - highlighting a tension for model developers between serving paying operators and protecting end users.

Read More

This work was done during one weekend by research workshop participants and does not represent the work of Apart Research.
This work was done during one weekend by research workshop participants and does not represent the work of Apart Research.