Chain of Thought Monitoring Can Fail Even When CoT Is Necessary
cs.AI, cs.CL
Submitted: 2026-10-13
Updated: 2026-10-13
Code: https://github.com/LennartBuerger/Monitoring_Necessary_CoT
License: http://creativecommons.org/licenses/by/4.0/
The gist: Chain of Thought (CoT) monitoring is used by frontier labs to detect misbehaviour of AI systems.
Abstract
Chain of Thought (CoT) monitoring is used by frontier labs to detect misbehaviour of AI systems. Yet, its reliability remains poorly understood. We attribute this to the lack of a successful organizing principle that leads to generalizable conclusions about monitoring reliability in different regimes. Recent work attributes monitoring failures to the CoT not being necessary for the answer, and argues that CoT becomes monitorable when it is necessary. We show that this binary necessary/not-necessary organizing principle is too coarse by demonstrating that monitoring failures persist even if the CoT is necessary for the answer. In response, we introduce a more fine-grained organizing principle based on a hierarchy of four CoT necessity levels. Building on this hierarchy, we develop a framework for measuring CoT monitorability at the three lowest levels via intervention experiments. We demonstrate monitoring failures at all three of these levels on realistic, hard prediction tasks. On a difficult medical-diagnosis task, patient sex and a clinical attribute influence the answer in at least 19% and 24% of correct responses with a necessary CoT, respectively, yet their influence is almost never articulated. These results show that even when CoT is necessary, it is not guaranteed to be monitorable.
Sources
- Concrete Problems in AI Safety
- Biases in the Blind Spot: Detecting What LLMs Fail to Mention
- Not All LLM Reasoning is Visible in the Chain-of-Thought
- Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation
- Reasoning Theater: Disentangling Model Beliefs from Chain-of-Thought
- Reasoning Models Don't Always Say What They Think
- Bias-Augmented Consistency Training Reduces Biased Reasoning in Chain-of-Thought
- Thought Crime: Backdoors and Emergent Misalignment in Reasoning Models
- Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities
- Chain-of-Thought Monitoring Can Be Unreliable in Implicit-Influence Settings
- When Chain of Thought is Necessary, Language Models Struggle to Evade Monitors
- Alignment faking in large language models
- Faithfulness Metrics Don't Measure Faithfulness: A Meta-Evaluation with Ground Truth
- Measuring Massive Multitask Language Understanding
- Chain of Thought Monitorability: A New and Fragile Opportunity for AI Safety
- SHADE-Arena: Evaluating Sabotage and Monitoring in LLM Agents
- When Reasoning Traces Become Performative: Step-Level Evidence that Chain-of-Thought Is an Imperfect Oversight Channel
- Show Your Work: Scratchpads for Intermediate Computation with Language Models
- Stealing Reasoning Traces from Proprietary LLM APIs
- Explainable Artificial Intelligence: Understanding, Visualizing and Interpreting Deep Learning Models
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems