They Infer What You Meant: Models Represent Communicative Intent More Reliably Than They Act On It

# Models Represent Communicative Intent More Reliably Than They Act On It
Source: [https://arxiv.org/html/2607.03598](https://arxiv.org/html/2607.03598)
###### Abstract

When a person shares something with a language model, the model often answers the*surface*of the message rather than what the sender was*doing*by sending it: share a finished project and it critiques the code; share a raw late\-night line and it runs a wellness check\. We treat the sender’s communicative intent, the Gricean*what\-was\-meant*, as a first\-class object of interpretability study, and show the failure is one of readout on top of a robust representation\. A linear probe decodes the sender’s intent, whether they want a thing*recognized*or*evaluated*, from a model’s default\-pass hidden states, cleanly and surface\-independently, across six models and four families and in the base checkpoints\. The representation generalizes further, to intent that is only pragmatically*inferred*, and to a second, genuinely different and lexically clean intent \(support versus help\)\. The behavioral half of the story, and every causal test, is established on the recognize/evaluate contrast, where what varies is whether the default output acts on the intent\. The readout*lags*the representation in depth within a model \(the intent is decodable several layers before it drives the output\); across models, which ones act on it by default is model\-specific, an observed stratification \(three of six show the failure\) that we do not read as a scaling law\. Where the gap is open, a direction closely tied to the representation, the discriminative direction at a searched\-for layer, is a causal handle: steering it recovers the intended behavior, as well as an explicit instruction does and with no prompt at all\. This direction is near\-orthogonal to the feedback\-offering axis, so it routes a represented intent rather than a generic feedback knob, though at the recovery dose the routed intent can override an explicit request\. We support each link with controls against the obvious deflations and report the nulls as plainly as the confirmations\.

![Refer to caption](https://arxiv.org/html/2607.03598v1/x1.png)Figure 1:The represent\-then\-lagging\-readout chain, exemplified on Qwen\-3B \(a model where the readout gap is open\)\.\(1\)A linear probe decodes the intent \(recognize vs evaluate\) from the default\-pass hidden state at1\.001\.00, while bag\-of\-words on held\-out phrasings is at chance \(0\.480\.48\)\.\(2\)The default reply nonetheless offers unsolicited feedback, honoring a recognize\-intent only about0\.650\.65of the time\.\(3\)Steering the residual stream along the discriminative intent direction at a late layer recovers honoring to0\.980\.98, unsolicited feedback collapsing and coherence preserved\. The representation is universal; whether the readout acts on it is model\-specific \(Section[7](https://arxiv.org/html/2607.03598#S7)\)\. The steered direction is near\-orthogonal to the feedback\-behavior axis, routing a represented intent rather than a generic feedback knob \(Section[9](https://arxiv.org/html/2607.03598#S9)\)\.## 1Introduction

A recurring failure in deployed language models is that they respond to the literal content of a message and miss its communicative intent, what the sender was trying to accomplish by sending it\. The failure is hard to see because the responses are fluent and often look caring: a model handed a person’s first finished creative project will, by default, offer improvements; a model handed a raw expression of exhaustion will, by default, assess risk\. Both responses pass a surface rubric, and both miss the person\. The framing is Gricean\(Grice,[1975](https://arxiv.org/html/2607.03598#bib.bib8)\): a cooperative reader answers what was*meant*, not only what was said\. Pragmatic competence of this kind has been*benchmarked*behaviorally\(Ruis et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib19)\); we ask instead where the intent lives inside the model\. A related, better\-studied failure of instruction\-tuned assistants\(Ouyang et al\.,[2022](https://arxiv.org/html/2607.03598#bib.bib13)\)is sycophancy, deferring to a user’s stated belief over the truth\(Sharma et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib20)\); ours is complementary, the default readout overrides the sender’s*goal*, not their stated belief\.

Our finding is that the intent is robustly*represented*and that the failure is one of*readout*\. A linear probe reads the sender’s intent out of the default\-pass hidden state cleanly \(Figure[1](https://arxiv.org/html/2607.03598#S0.F1)\), and it does so even when the intent is never stated and must be*inferred*from context, so the model performs the pragmatic inference internally\. What varies is whether the readout acts on it, and it varies systematically\. The readout*lags*the representation in depth: within a model, the intent is decodable several layers before the layer at which it drives the output\. Across models the pattern is a*stratification*rather than a lag, the same intent is represented everywhere but whether the default readout acts on it is model\-specific \(the failure appears in three of six\), which may reflect differing feedback\-offering priors as much as differing capability\. This behavioral discard is not our headline claim but our*lens*: the regime where the represented\-but\-unused intent is visible in behavior and, crucially, causally manipulable, steering a direction closely tied to it there recovers the honored behavior as well as an explicit instruction does and with no prompt at all\. The finding is therefore the*separation*of representing an intent from acting on it, a dissociation the probe and the depth localization expose directly; the behavioral gap is closed on this particular intent in some models without retiring that separation\. This reframes “the model does not get it”: it does get it; whether it*acts*depends on whether the readout routes what it already encodes\. And frontier systems are closed to activation access, so a mechanism like this can only be mapped where the residual stream is open: we study the wall where it is exposed, and it is the represent\-then\-route*map*\(present through3232B\), not this ceiling\-bound behavior, that we expect to transfer\.

### Contributions\.

The steering machinery here is standard; the object and the decomposition are not\. \(i\) We treat a sender’s*communicative intent*, what they were doing by sending a message, as a first\-class interpretability feature\. Probing has read what models know, what users*are*\(author attributes\), and*story characters’*beliefs, the last with probe\-and\-steer\(Bortoletto et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib6)\); to our knowledge a*sender’s*goal, distinct from a character’s belief or a user’s attribute, has not been treated as a linear, causal feature, and the represent\-versus\-readout decomposition with depth localization is new\. \(ii\) We show the intent is represented robustly, surface\-independently, from pretraining, across six models and four families, and even when it is never stated and must be pragmatically inferred, where a valence control indicates the probe reads intent rather than warmth \(Sections[3](https://arxiv.org/html/2607.03598#S3)–[4](https://arxiv.org/html/2607.03598#S4)\)\. \(iii\) We separate representation from readout: the readout*lags in depth*within a model \(Section[10](https://arxiv.org/html/2607.03598#S10)\) and is*model\-specific*across models \(Section[7](https://arxiv.org/html/2607.03598#S7)\), with a direction closely tied to the representation a causal handle wherever the gap is open \(Section[6](https://arxiv.org/html/2607.03598#S6)\)\. \(iv\) We report the controls and the nulls, an inconclusive pre\-registered mechanism test among them, as plainly as the confirmations\.

### What “discarded” means, and does not\.

We use*discarded at readout*operationally, not as a claim the feature is erased: the intent is probe\-decodable, the default output does not act on it, and steering recovers it \(it persists in depth and stays routable, Section[10](https://arxiv.org/html/2607.03598#S10)\)\. The measure speaks to*routability*, not normative ground truth: we do not claim fully honoring is always correct, only that default behavior tracks a represented intent it does not use\.

## 2Setup

We use a binary intent contrast that is common, checkable, and non\-emotional: a sender shares a thing they made, wanting it eitherrecognized\(acknowledged, seen as an accomplishment, no evaluation invited\) orevaluated\(assessed critically\)\. The contrast is realized over 60 shared objects\.

### Surface\-matched design\.

Each pair shares an*identical*final message; the intent is set only by a preceding clause \(Box\)\. The probed token sits inside the identical suffix, so a probe that separates the two intents cannot be reading the surface of the probed position\. To prevent the intent clause from leaking the label lexically, we use eight lexically diverse phrasings of each intent and evaluate with leave\-one\-phrasing\-out cross\-validation \(Section[3](https://arxiv.org/html/2607.03598#S3)\)\.

Surface\-matched pair \(identical suffix, intent set by the prefix\)recognize: I don’t usually share what I make, but I’m proud of this one\.Okay, here it is: the birdhouse\. It works now\. evaluate: Be blunt, I’d rather hear the flaws now than after I publish\.Okay, here it is: the birdhouse\. It works now\.

## 3The Intent Is Represented

We run Qwen2\.5\-3B\-Instruct\(Qwen Team,[2024](https://arxiv.org/html/2607.03598#bib.bib16)\)on each ofn=120n\{=\}120messages and take the hidden state at the generation\-prompt position, the model’s state immediately before it would respond\. A linear classifier \(standardize, PCA to≤40\\leq 40components,ℓ2\\ell\_\{2\}logistic\) is trained to decode the intent from that activation\(Alain & Bengio,[2017](https://arxiv.org/html/2607.03598#bib.bib2); Belinkov,[2022](https://arxiv.org/html/2607.03598#bib.bib4)\)\.

### Controls\.

High\-dimensional probes overfit, so chance is set*empirically*by a shuffled\-label permutation baseline rather than assumed to be0\.500\.50\. Generalization is tested with GroupKFold by phrasing: the probe trains on seven phrasing\-pairs and is tested on the held\-out eighth, whose words it never saw\. A bag\-of\-words classifier under the identical cross\-validation is the lexical baseline: the activation probe earns “intent beyond surface” only if it generalizes where bag\-of\-words cannot\.

### Result\.

Bag\-of\-words on held\-out phrasings is at chance \(0\.480\.48\): pure lexical features do not transfer across wordings, so the leave\-phrasing\-out design is clean\. The activation probe, on those same held\-out phrasings, decodes the intent well above both the lexical baseline and the permutation ceiling, and it rises with depth \(Table[1](https://arxiv.org/html/2607.03598#S3.T1)\)\. A surface signal would be flat\-high from the earliest layer; in a deliberately leaked control with lexically distinct prefixes the probe is indeed1\.001\.00at every layer including layer 6\. Closing the leak drops the early layers \(1\.00→0\.741\.00\\to 0\.74at layer 6\) while the deep\-layer signal survives and concentrates, the signature of a*computed*intent\. The probe also generalizes across held\-out*objects*: under leave\-one\-object\-out cross\-validation it reaches1\.001\.00on both Qwen\-3B and Llama\-8B, confirming that object identity, shared between an object’s recognize and evaluate stimulus, carries no label information\. The read position carries no surface signal either: the probed token sits in a suffix byte\-identical across an intent pair, so intent is unreadable there and a probe on it is at chance by construction; the ceiling accuracy is a computed contextual feature set by the prefix, not a positional or lexical artifact\.

### Present before alignment\.

The representation is not an artifact of instruction tuning\. On the base \(pre\-instruct\) checkpoints of Qwen2\.5\-3B and Llama\-3\.1\-8B, the same probe decodes intent at0\.990\.99and0\.990\.99\(bag\-of\-words at chance\), essentially matching their instruct versions\. The feature is learned in pretraining; instruction tuning inherits it rather than creating it\.

### Intent, not request\-detection\.

The evaluate prefixes carry an explicit directive \(“be blunt…”\) while recognize prefixes do not, so a probe could be decoding*a directive is present*rather than the intent\. A request\-matched variant gives both classes an explicit directive \(“please just celebrate this with me…” vs\. “be blunt…”\), so only the request’s*content*differs; the probe still decodes the intent at0\.900\.90–1\.001\.00across four models, clearing bag\-of\-words \(0\.690\.69\) by0\.250\.25–0\.300\.30everywhere\. The two designs are complementary: one holds the surface identical \(bag\-of\-words at chance0\.480\.48\), the other holds request\-presence constant, and the probe reaches ceiling in both, so what is constant across them is the intent \(Appendix[H](https://arxiv.org/html/2607.03598#A8)\)\.

Table 1:Intent decodability from the default\-pass last\-token activation, leave\-one\-phrasing\-out CV \(n=120n\{=\}120, Qwen2\.5\-3B\-Instruct\)\. Not lexical \(bag\-of\-words=0\.48=0\.48\), clears the permutation ceiling at every layer, rises with depth to a peak at layer 24 and holds≥0\.98\\geq 0\.98through layer 36\.

## 4The Intent Is Inferred, Not Just Stated

In the stimuli so far the intent is*stated*in the prefix \(“I’d rather hear the flaws”\), so a probe that decodes it could be reading a declared preference rather than a pragmatic inference\. We test the harder case: the intent is never stated and must be*inferred*from context\. The sender shares the same object under one of two implicit frames, a personal context that implies they want it appreciated \(“it’s a birthday present for my mom”\) or a stakes context that implies they want it scrutinized \(“it’s going in my portfolio”\), with no word naming the preference\. The suffix is surface\-matched as before, so a probe that separates the two reads the inferred intent, not the frame\.

### Inferred intent is represented\.

A probe decodes the inferred intent from default\-pass hidden states at0\.870\.87–0\.950\.95across the six models and at0\.930\.93on Qwen\-32B, above a bag\-of\-words baseline \(0\.650\.65\)\. A probe trained only on the*stated*\-intent templates transfers to hand\-written, non\-templated messages that carry no explicit marker \(“six months sober today, wanted to tell someone”\) at1\.001\.00\(Section[11](https://arxiv.org/html/2607.03598#S11)\)\. The model performs the pragmatic inference internally\.

### It reads intent, not warmth\.

The implicit frames carry valence \(a birthday gift is warm, a portfolio is not\), which the elevated bag\-of\-words baseline confirms is lexically marked, so we rule out that the probe decodes warmth rather than intent\. We cross intent with valence into four cells, intent always inferred: warm/recognize, warm/evaluate, neutral/recognize, neutral/evaluate\. The disentanglement evidence is*transfer*: an intent probe trained on the*warm*cells decodes intent on the held\-out*neutral*cells at0\.630\.63–0\.830\.83\(and neutral\-to\-warm at0\.750\.75–0\.800\.80\), and the intent direction is near\-orthogonal to the valence direction \(cosine0\.080\.08–0\.160\.16\); within each valence cell intent is perfectly decodable \(1\.001\.00\), supporting texture rather than the headline\. Intent and warmth are distinct axes and the probe reads intent \(transfer is cleaner on Qwen\-3B,0\.830\.83, than Llama\-8B,0\.630\.63, so the direction is universal but shifts with context\)\.

### Caveat\.

This axis is more lexically marked than the surface\-matched explicit one \(bag\-of\-words0\.650\.65versus0\.480\.48\); we present it as the Gricean extension of the clean explicit result, carrying that caveat, as with the vent\-versus\-solve axis \(Appendix[I](https://arxiv.org/html/2607.03598#A9)\)\. The behavioral discard on inferred intent is weaker and more model\-specific than on stated intent, the personal frames themselves pull for acknowledgment, so the contribution here is that inferred intent is*represented*, not a second behavioral demonstration\.

## 5The Intent Is Discarded

The representation only matters if the default output misses it\. On the same model, with the intent decodable at1\.001\.00, the default response honors a*recognize*\-intent share only0\.650\.65of the time; on the rest it offers unsolicited feedback\. The discard is visible in the generations on people who shared something with no request for evaluation \(Box\)\.

Default Qwen replies to recognize\-intent shares \(no critique requested\)‘‘That sounds exciting\! I’m here to help you with any feedback or guidance you need…’’ ‘‘I’d love to read your short story and provide feedback if you’re willing to share…’’

### The measure is not a lexical artifact\.

Honoring is scored by a feedback\-offer lexicon throughout\. An independent sentence\-embedding classifier \(no shared vocabulary\) reaches the same conclusions, and where the two disagree the embedding*under*\-counts the discard, scoring warm replies that still offer tips as acknowledgment on their register, the very failure this paper studies, so the semantic measure’s errors run against our effect, not for it \(full comparison, Appendix[B](https://arxiv.org/html/2607.03598#A2)\)\.

### Validated against three human raters\.

On a blind, shuffled subset of6060replies \(recognize shares under default and steered, plus evaluate anchors\),*three*annotators, the author and two independent raters, each saw only the message and reply, blind to condition and to the automated label, and marked whether it offers unsolicited feedback\. Agreement is high and author\-independent: the two independent raters agree at Cohen’sκ=0\.70\\kappa\{=\}0\.70, the author agrees with them at0\.740\.74and0\.880\.88, and Fleiss’κ\\kappaacross all three is0\.760\.76; each passes the attention check \(1111–1212of1212evaluate anchors marked as feedback\)\. The feedback\-offer lexicon agrees with the human*majority*atκ=0\.74\\kappa\{=\}0\.74\(accuracy0\.880\.88\), the embedding measure atκ=0\.51\\kappa\{=\}0\.51\(it under\-counts, keying on warmth over content\), so the measure tracks a three\-way human consensus, not one author’s judgment\. The effect reproduces on the human labels directly: by majority vote, recognize\-intent honoring rises from0\.710\.71\(default\) to1\.001\.00\(steered\), matching the classifiers\.

## 6The Intent Is Causally Recoverable

If the intent is represented and discarded, a sufficient test of “represented but not used” is whether*adding*the represented direction to the residual stream makes the output honor the intent\(Turner et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib22); Li et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib12); Rimsky et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib18); Zou et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib24)\)\. We extract a steering direction and add it at one decoder layer during generation, measuring whether the model’s behavior moves along the intent axis\.

### Finding the handle\.

Difference\-of\-means at the peak\-probe layer \(24\) does not steer behavior: the directions fail the sanity gate, and naive amplification tends to increase the discard, because the recognize\-intent representation is entangled with the default feedback\-offering behavior on those items\. This is a point of departure from steering of explicit*instructions*, where a difference\-of\-means vector \(inputs with versus without the instruction\) suffices\(Stolfo et al\.,[2025](https://arxiv.org/html/2607.03598#bib.bib21)\): a sender’s intent is a subtler pragmatic feature, and there the contrastive\-mean direction is entangled with the behavior rather than a handle on it\. Two changes recover a clean handle: the*discriminative*\(logistic weight\) direction rather than difference\-of\-means, and a*later*layer \(a sweep finds layer 30\)\. We do not isolate which change carries the effect \(the logistic\-at\-2424/ diff\-of\-means\-at\-3030factorial is untested\), so the handle is a direction*closely tied to*the representation at a searched\-for layer, not the probe’s peak direction itself\.

### Dose\-response\.

At layer 30, steering along the probe direction gives a clean monotone dose\-response on the full6060\-item recognize set \(bootstrap95%95\\%CIs; Appendix[C](https://arxiv.org/html/2607.03598#A3), Table[C](https://arxiv.org/html/2607.03598#A3)\)\. Steering toward recognize lifts honoring0\.65→0\.82→0\.980\.65\\to 0\.82\\to 0\.98as the coefficient grows, with the baseline and full\-dose intervals disjoint; unsolicited feedback correspondingly falls away\. Coherence holds at the effective doses and the sanity gate passes throughout; beyond coefficient1\.01\.0coherence degrades, bounding the usable range\. Routing the direction the model already encodes recovers the behavior it discards\.

## 7Generality: Six Models, Four Families

We put the discard and recovery on firmer statistical footing and ask honestly how far they travel, extending the probe and steering sweep from Qwen\-3B to five further models: Qwen2\.5\-7B and 14B\(Qwen Team,[2024](https://arxiv.org/html/2607.03598#bib.bib16)\), Mistral\-7B\-Instruct\(Jiang et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib10)\), Phi\-3\.5\-mini\(Abdin et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib1)\), and Llama\-3\.1\-8B\-Instruct\(Dubey et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib7)\)\(three further families\), the steer layer chosen per model by the same sweep used for the 3B \(Section[6](https://arxiv.org/html/2607.03598#S6)\)\. Intent decodes at probe1\.001\.00with bag\-of\-words at chance on all six, across a4×4\{\\times\}size range and four architecture families \(Qwen, Mistral, Phi, Llama; Appendix[K](https://arxiv.org/html/2607.03598#A11), Table[5](https://arxiv.org/html/2607.03598#A11.T5)\): the*representation*is not a small\-model or single\-family artifact\. The behavioral discard is another matter\. On the*full*60\-item recognize set, across all six models at their per\-model steer layers, we measure default versus steered honoring at a4040\-token reply budget with bootstrap95%95\\%confidence intervals \(Table[2](https://arxiv.org/html/2607.03598#S7.T2); the CIs bootstrap over items sharing suffix templates, so treated as exchangeable they may be mildly optimistic, though the margins dwarf plausible item\-level wobble\), and the picture stratifies\. On three models the default discard is real and the recovery is*non\-overlapping*with it: Qwen\-3B, Qwen\-7B, and Llama\-8B honor recognize\-intent only0\.570\.57–0\.650\.65by default and0\.850\.85–0\.980\.98under steering, with disjoint intervals\. The other three already honor at a high baseline \(Qwen\-14B0\.820\.82, Mistral0\.880\.88, Phi\-3\.50\.930\.93\): little discard to recover, so steering nudges within overlapping intervals without degrading\. The readout discard is therefore*model\-specific*, present where the model over\-produces feedback by default and near\-absent where it already honors the intent, whereas the representation is universal\. The recovery is not a greedy artifact: Qwen\-3B under temperature\-0\.70\.7sampling \(three seeds\) gives default0\.530\.53–0\.600\.60and steered0\.950\.95–0\.970\.97\. As a sanity check, evaluate\-intent items draw feedback at0\.630\.63–0\.800\.80\(the withholding on recognize\-intent tracks the intent, not an inability to critique; see Limitations\)\. The recovery is*front\-loaded*: on Qwen\-3B the steering separation dilutes over longer replies as the model drifts back toward feedback \(S=14→4S\{=\}14\\to 4at a100100\-token budget; Appendix[F](https://arxiv.org/html/2607.03598#A6)\)\.

### The same shape as depth \(model\-specific, not a scaling law\)\.

The split does not track raw size: the discard cases are the smaller, less instruction\-mature models \(≤8\\leq 8B\) and the ceiling cases the more mature ones \(≥14\\geq 14B\), with one telling exception, Mistral\-7B sits at ceiling while the larger Qwen\-14B only barely clears it\. We do not measure capability independently \(it would be read off the same behavior it explains\), so we state the pattern as*model\-specific*, the larger and instruction\-mature models at ceiling in this sample, rather than as a capability law\. Pushing further up, Qwen\-32B represents the intent \(probe0\.990\.99stated,0\.930\.93inferred\) yet honors it at baseline \(0\.780\.78and0\.770\.77, nearer the ceiling models than the discard ones but not far above our soft threshold\): the discard, absent from 14B up, does not clearly return at 32B\. This echoes the depth result of Section[10](https://arxiv.org/html/2607.03598#S10), where the intent is represented several layers before the readout uses it\. Within a model the readout lags the representation in depth; across models we report an*observed stratification*, not a scaling law: with six models, one of them \(Mistral\-7B\) already breaking the size ordering, and a soft honoring threshold, we do not have the points to fit a curve\. A pre\-registered geometric test for the across\-model pattern was inconclusive \(Appendix[E](https://arxiv.org/html/2607.03598#A5)\); the across\-model claim rests on the behavioral stratification here and the within\-model depth localization\.

### The steer layer is model\-specific, and not cherry\-picked\.

The layer at which the handle works is*not*a fixed fraction of depth: mid\-network for the 7B and Llama\-8B \(0\.570\.57,0\.590\.59\), late for the 14B and 3B \(0\.850\.85,0\.830\.83\), and between for Phi and Mistral \(0\.690\.69\); a fixed\-depth heuristic under\-recovers \(it limped on the 7B until the per\-model sweep located layer 16\), so the sweep, not a depth rule, finds the handle\. Nor is it tuned on the items where the effect is measured: with a nested split*by object*, the direction is fit and the layer and coefficient selected on a*dev*half of the objects and recovery measured on the disjoint*test*half, the recovery stays non\-overlapping with the default baseline on both models \(Qwen\-3B0\.70→1\.000\.70\\to 1\.00at the dev\-selected layer 28, coefficient1\.01\.0; Llama\-8B0\.53→0\.870\.53\\to 0\.87at layer 19, coefficient0\.50\.5\)\. The other four models’ steer layers are selected in\-sample \(swept on the evaluation items\), so we flag those rows of Table[2](https://arxiv.org/html/2607.03598#S7.T2)as not out\-of\-sample validated \(the effect did hold out of sample on the two we split\)\. A linear map fit between two models’ activation spaces transports Qwen\-3B’s intent direction into Llama\-8B and steers it, but its held\-out reconstruction is poor and the result is only suggestive, so we keep it exploratory and in Appendix[G](https://arxiv.org/html/2607.03598#A7); the per\-model probe, bag\-of\-words, and steer\-layer figures are tabulated in Appendix[K](https://arxiv.org/html/2607.03598#A11)\.

Table 2:Discard and recovery at full scale: recognize\-intent honoring,n=60n\{=\}60items, default vs steering toward recognize, bootstrap95%95\\%CI over items, all six models\. The readout discard is model\-specific: on three models \(top\) the default discard is real and the recovery is non\-overlapping; the other three \(bottom\) already honor recognize\-intent at a high baseline, so there is little to recover and steering nudges within overlapping intervals without degrading\. Qwen\-3B holds under sampled decoding \(text\)\.

## 8Generalizing Across Intents

The clean evidence so far is all recognize\-versus\-evaluate \(stated, Section[3](https://arxiv.org/html/2607.03598#S3); inferred, Section[4](https://arxiv.org/html/2607.03598#S4)\); the one*different*intent we test, vent versus solve, is lexically marked \(bag\-of\-words0\.790\.79; Appendix[I](https://arxiv.org/html/2607.03598#A9)\)\. That markedness is partly constitutive: one cannot ask to vent without venting words, just as the request\-matched control could not ask for celebration without celebration words\. Recognize\-versus\-evaluate is special precisely because its intent can ride a prefix over a byte\-identical suffix; some intent contrasts admit a surface\-matched design and some structurally cannot, which bounds where the strong surface\-independence claim can ever be tested\. To show the representation is nonetheless not specific to one contrast, we add a third axis designed clean:*support*\(the sender wants a difficulty heard\) versus*help*\(wants it solved\), set only by an*inferred*context frame, never stated, over a neutral surface\-matched core with lexically diverse frames so leave\-one\-frame\-out defeats a word\-counter; behavior is scored by whether the reply offers unsolicited*solutions*\. The design holds: bag\-of\-words sits at0\.570\.57on every model while the probe decodes the inferred intent at0\.710\.71–0\.860\.86\(Appendix[J](https://arxiv.org/html/2607.03598#A10)\), so the*representation*generalizes to a genuinely different, fully inferred intent, not only across models\. The readout, though, tracks it only weakly \(help\-intent draws unsolicited solutions more than support, but the inferred intent is solutionized faintly either way\) and the represented direction is*not*a causal handle here: steering toward support raises honoring, but the specificity control of Section[9](https://arxiv.org/html/2607.03598#S9)*fails*, random matched\-norm directions move solutionizing as much as the learned one \(S=6S\{=\}6and1111against random maxima1919and1616on Qwen\-3B and Phi\-3\.5;p=0\.31p\{=\}0\.31,0\.140\.14\)\. We scope this axis to the representation and record the steering as a null\.

## 9Specificity of the Direction

A steering result invites one objection above all: perhaps the direction is a generic feedback\-or\-verbosity knob, and any large perturbation would move the behavior\. Two dissociations show the effect is specific to the learned intent direction\.

### Only the discriminative direction steers\.

As Section[6](https://arxiv.org/html/2607.03598#S6)reports, the difference\-of\-means direction at the peak\-probe layer fails the sanity gate, while the discriminative \(logistic\-weight\) direction at a later layer passes it\. A direction that merely separates the two intent*clouds*in activation space does not recover the behavior; the direction that discriminates them does\. Not any intent\-correlated axis works\.

### Norm\-matched controls do not reproduce the effect\.

At each model’s validated steer layer we measure the behavior separationS=feedback​\(toward\-evaluate\)−feedback​\(toward\-recognize\)S=\\mathrm\{feedback\}\(\\text\{toward\-evaluate\}\)\-\\mathrm\{feedback\}\(\\text\{toward\-recognize\}\)over2424items\. The true direction givesS=14S\{=\}14on Qwen\-3B \(layer 30:17/2417/24feedback toward evaluate vs3/243/24toward recognize\) andS=16S\{=\}16on Qwen\-7B \(layer 16:19/2419/24vs3/243/24\)\. Across4848random directions of matched norm, scattered in sign and centered near zero, none reaches the true separation on either model \(max\|S\|=13\|S\|\{=\}13and1515; permutationp=0\.02p\{=\}0\.02, the floor attainable with48\+148\{\+\}1directions; Figure[2](https://arxiv.org/html/2607.03598#A4.F2)in the appendix\)\. The effect requires the specific learned direction, not a perturbation of matched norm\. Shuffled\-label directions agree \(maxS=10S\{=\}10and99versus1414and1616\), though this control has a fat tail on strong axes \(an earlier run saw one permutation tie\), so the specificity claim rests on the difference\-of\-means dissociation and the random null \(full distributions, Appendix[D](https://arxiv.org/html/2607.03598#A4)\)\.

### Is the recovery just opener\-token biasing?

A sharper deflation: late\-layer steering might merely bias the first token toward acknowledgment openers \(“Congratulations…”\), needing no represented intent\. Three tests refute it where steering is clean \(Appendix[F](https://arxiv.org/html/2607.03598#A6)\): the intent direction is near\-orthogonal to the opener\-unembedding axis at the steer layer \(\|cos\|≤0\.14\|\\cos\|\\leq 0\.14on all three discard models\); on Qwen\-7B, steering with the entire first sentence removed swings feedback exactly as much as on the full reply \(Srest=S=14S\_\{\\mathrm\{rest\}\}\{=\}S\{=\}14\), so it reorients the body, not the opening move; and steering the opener direction itself at matched norm fails to reproduce the recovery\. On Qwen\-3B the separation dilutes over long generations, so its refutation rests on the geometry alone\.

### Does the handle route intent, or just suppress feedback?

A deflationary reading is that the direction is merely the feedback\-offering behavior axis, correlated with intent by construction \(the labels are defined by whether feedback is wanted\), so steering it just suppresses feedback\. Two results rule this out\. First, applying the same recognize\-steer vector to the evaluate\-intent items \(“be blunt…”\), requested feedback is reduced by a model\-specific amount, largely surviving on Llama\-8B \(0\.68→0\.420\.68\\to 0\.42, while recognize\-honoring recovers0\.57→0\.850\.57\\to 0\.85\) but mostly collapsing on the two Qwen models \(0\.77→0\.070\.77\\to 0\.07,0\.80→0\.120\.80\\to 0\.12\)\. Second, and decisively, the steered direction is*not*the feedback axis: fitting a direction on reply behavior alone \(feedback versus acknowledgment, ignoring the intent labels\) at the steer layer, its cosine with the intent\-probe direction is only0\.090\.09–0\.130\.13across the three models \(matched\-norm random directions give0\.010\.01–0\.090\.09\), near\-orthogonal\. This behavior direction is estimated at the steer layer only, from default replies whose class balance is whatever the discard produced \(∼\\sim65/35\), so it is a noisier direction than the probe, and0\.130\.13against a random max of0\.090\.09warrants*separable from*, not*unrelated to*\. So the handle routes a*represented intent*, a feature distinct from the behavior it drives; the requested\-feedback collapse is that routed intent overriding the surface request at the recovery dose \(model\-specifically\), not a generic feedback knob\.

### The chain is not specific to one intent contrast\.

A second axis,*vent*versus*solve*, replicates the whole chain with the same model\-specificity \(probe1\.001\.00/0\.970\.97; a non\-overlapping discard\-then\-recovery0\.70→0\.980\.70\\to 0\.98on Qwen\-3B, ceiling on Llama\-8B\)\. Being more lexically marked \(bag\-of\-words0\.790\.79\), it does more for the behavioral generalization than for surface\-independence; full numbers in Appendix[I](https://arxiv.org/html/2607.03598#A9)\.

## 10Localizing the Discard

Represented and recoverable place the discard somewhere in the network’s computation; we now read where\. On two models \(Qwen2\.5\-3B and Llama\-3\.1\-8B\) we sweep every few layers and read, at each, how decodable the intent is \(the probe\) and how much steering*at that layer*recovers honoring, the latter on the full6060\-item recognize set with bootstrap95%95\\%CIs; on Qwen\-3B we also read where the reply opener commits, via a logit\-lens of the last\-token residual through the unembedding\(Belrose et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib5)\)\(Table[3](https://arxiv.org/html/2607.03598#S10.T3); Figure[3](https://arxiv.org/html/2607.03598#A4.F3)in the appendix\)\.

### Represented before routed\.

On both models the probe saturates at layers where steering does*not*yet recover honoring\. On Qwen\-3B the intent is decodable by mid\-network \(probe1\.001\.00at layer 24\) but steering there leaves honoring at the0\.650\.65baseline \(CI overlapping\); recovery appears only at layers 28–33, whose CIs clear the baseline, and the acknowledgment\-opener mass in the logit\-lens is flat until it spikes at layer 28, where the reply is composed\. Llama\-8B shows the same ordering, the probe saturates \(1\.001\.00by layer 10\) before steering recovers \(from layer 14\), though its routing onset is earlier and more diffuse than Qwen’s sharp late window\. The general fact is a*gap*: the sender’s intent is represented before it is routed into the readout, and the causal handle lives past the representation, not at it\. Where exactly the routing happens is model\-specific, consistent with the model\-specific steer layer of Section[7](https://arxiv.org/html/2607.03598#S7)\. A probe saturating before steering becomes effective is common for many features, including acted\-on ones; lacking the matched sweep on a*non\-discarded*feature, we read the ordering as consistent with a discard, not diagnostic of one over a generic depth property of steering\.

### Distributed, not a single head\.

The window localizes in depth but not to an atomic component\. Ablating each late\-layer attention head in turn \(query\-side, one at a time\) does not restore honoring: the best single\-head ablation lifts it by one item out of sixteen, and an early\-layer control head ties for the top\. The discard is a distributed late computation, recoverable by the full linear direction but not attributable to any one head, consistent with a routing window rather than a point\.

Table 3:Localizing the discard atn=60n\{=\}60with bootstrap95%95\\%CIs, on two models\. On both, the probe saturates \(intent represented\) at layers where steering does not yet recover honoring \(CI overlaps baseline\); recovery appears only deeper \(bold: CI clears baseline\)\. Represented before routed\. The routing onset is model\-specific: late and sharp for Qwen\-3B \(the logit\-lens acknowledgment mass spikes at layer 28\), earlier and more diffuse for Llama\-8B\.

## 11The Direction Is a Handle With No Prompt, and It Transfers

If the intent is represented, one might simply*tell*the model in a system prompt\. Atn=60n\{=\}60with bootstrap CIs \(Table[4](https://arxiv.org/html/2607.03598#A9.T4)\), an explicit intent prompt largely closes the gap \(0\.930\.93\) and steering reaches0\.980\.98with overlapping intervals, so we do*not*claim routing beats prompting; the point is that the represented direction is a handle as good as the instruction with*no prompt at all*, and the two stack to1\.001\.00, which matters wherever the prompt cannot be rewritten \(an agent loop, a fixed API\)\. One observation survives at power: a*vague*nudge backfires\. Telling the model to “consider what this person is looking for”*lowers*honoring from0\.650\.65to0\.450\.45; it reads the instruction to attend as license to help\. The same direction, fit only on templates, also transfers off them: on hand\-written non\-templated messages the template\-trained probe classifies intent at1\.001\.00and the discard\-and\-recovery reproduces \(0\.62→1\.000\.62\\to 1\.00,23/2323/23coherent\); atn=23n\{=\}23author\-written messages this is a smoke test against a pure\-template artifact, not an ecological\-validity claim \(Appendix[L](https://arxiv.org/html/2607.03598#A12)\)\.

## 12Related Work

### Communicative intent and pragmatics\.

The object we probe is Gricean: what a sender*meant*by a message, not its surface\(Grice,[1975](https://arxiv.org/html/2607.03598#bib.bib8)\)\. Pragmatic competence of this kind has been benchmarked \(implicature resolution,Ruis et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib19)\) and probed as a story character’s theory\-of\-mind beliefs\(Bortoletto et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib6)\), where an explicit\-versus\-implicit gap is documented\(Gu et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib9)\)\. Andreas’s conjecture that a predictor comes to represent the agent behind the text\(Andreas,[2022](https://arxiv.org/html/2607.03598#bib.bib3)\)is one our base\-checkpoint result cashes out\. To our knowledge a*sender’s*goal, distinct from a character’s belief or a user’s attribute, has not been treated as a linear, causal feature\.

### Linear representations and probing\.

Linear probes read features from hidden states\(Alain & Bengio,[2017](https://arxiv.org/html/2607.03598#bib.bib2); Belinkov,[2022](https://arxiv.org/html/2607.03598#bib.bib4)\); a broad literature reads truthfulness, sentiment, and refusal directions from activations\(Zou et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib24)\), to which we add a sender’s communicative intent, separating its*representation*from whether the readout acts on it\.

### Activation steering\.

Adding a direction to the residual stream steers behavior\(Turner et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib22); Li et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib12); Rimsky et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib18); Zou et al\.,[2023](https://arxiv.org/html/2607.03598#bib.bib24)\)\. Closest to us,Stolfo et al\. \([2025](https://arxiv.org/html/2607.03598#bib.bib21)\)steer explicit instruction\-following \(format, length, word constraints\) with difference\-of\-means vectors; we find that for the subtler pragmatic intent feature the difference\-of\-means direction is entangled with the behavior and a discriminative direction at a later layer is required \(Section[6](https://arxiv.org/html/2607.03598#S6)\)\. Our contribution is not the steering machinery but the*object*\(a sender’s goal\) and the represent\-versus\-readout*decomposition*, which mirrors behavioral dissociations in theory of mind\(Gu et al\.,[2024](https://arxiv.org/html/2607.03598#bib.bib9)\)and lossy memory\(Kwon,[2026](https://arxiv.org/html/2607.03598#bib.bib11)\), shown here mechanistically\.

## 13Conclusion

The picture is a readout that lags a representation\. A sender’s communicative intent is represented cleanly, from pretraining, across six models and four families, even when it must be inferred and disentangled from the warmth it correlates with; acting on it is the fragile part, and the lag is patterned: decodable layers before it is routed within a model, discarded only by some models across them, an observed stratification that holds through 32B\. Where the gap is open a direction closely tied to the representation is a causal handle as good as an explicit instruction, with no prompt, though it acts on feedback\-offering behavior and is not always selective for*unsolicited*feedback\. “The model does not get it” is, on this evidence, usually false: it gets it; whether it*acts*is the model\-specific question\. The object, not any single number, is the contribution, and the nulls we report against ourselves are the load\-bearing part\.

## Ethics Statement

This is diagnostic interpretability on open\-weight models\. The stimuli are synthetic templates and hand\-written examples authored by the researcher; no real user data or human subjects were involved, and the behavioral annotation \(Section[5](https://arxiv.org/html/2607.03598#S5)\) was performed by the author and two independent volunteers who consented to the labeling task\. Activation steering is established and we introduce no new capability; the direction we study \(honoring a sender’s intent\) is benign, but the same handle could suppress*useful*critique or induce sycophantic withholding, so we are explicit that “honoring” measures routability, not a claim that a model should always withhold feedback \(a warm reader may rightly offer a gentle note\)\. We do not recommend intent\-steering as a blanket “suppress feedback” intervention; the intended use is understanding where models represent intent and building more faithful readouts on top of it\.

## Reproducibility Statement

All code, stimuli, and pre\-registration are released \(Appendix[M](https://arxiv.org/html/2607.03598#A13), which lists the exact commands\)\. The surface\-matched stimuli and leave\-one\-phrasing\-out protocol are specified in Appendix[A](https://arxiv.org/html/2607.03598#A1), the probe and its empirical\-chance and bag\-of\-words controls in Appendix[B](https://arxiv.org/html/2607.03598#A2), and the steering direction, per\-layer calibration, and sanity gate in Appendix[C](https://arxiv.org/html/2607.03598#A3)\. The core probe\-and\-recover chain runs CPU\-only on Qwen2\.5\-3B; the six\-model sweeps and every steering result run on a single A100 through Modal\. Intent labels require no annotation \(they are fixed by construction\); the behavioral measure and its human validation are detailed in Section[5](https://arxiv.org/html/2607.03598#S5)\.

## References

- Abdin et al\. \(2024\)Marah Abdin et al\.Phi\-3 technical report: A highly capable language model locally on your phone, 2024\.URL[https://arxiv\.org/abs/2404\.14219](https://arxiv.org/abs/2404.14219)\.
- Alain & Bengio \(2017\)Guillaume Alain and Yoshua Bengio\.Understanding intermediate layers using linear classifier probes\.In*International Conference on Learning Representations \(ICLR\), Workshop Track*, 2017\.
- Andreas \(2022\)Jacob Andreas\.Language models as agent models\.In*Findings of the Association for Computational Linguistics: EMNLP 2022*, 2022\.doi:10\.18653/v1/2022\.findings\-emnlp\.423\.URL[https://aclanthology\.org/2022\.findings\-emnlp\.423](https://aclanthology.org/2022.findings-emnlp.423)\.
- Belinkov \(2022\)Yonatan Belinkov\.Probing classifiers: Promises, shortcomings, and advances\.*Computational Linguistics*, 48\(1\):207–219, 2022\.
- Belrose et al\. \(2023\)Nora Belrose, Zach Furman, Logan Smith, Danny Halawi, Igor Ostrovsky, Lev McKinney, Stella Biderman, and Jacob Steinhardt\.Eliciting latent predictions from transformers with the tuned lens\.*arXiv preprint arXiv:2303\.08112*, 2023\.URL[https://arxiv\.org/abs/2303\.08112](https://arxiv.org/abs/2303.08112)\.
- Bortoletto et al\. \(2024\)Matteo Bortoletto, Constantin Ruhdorfer, Lei Shi, and Andreas Bulling\.Benchmarking mental state representations in language models\.In*ICML 2024 Workshop on Mechanistic Interpretability*, 2024\.
- Dubey et al\. \(2024\)Abhimanyu Dubey et al\.The llama 3 herd of models, 2024\.URL[https://arxiv\.org/abs/2407\.21783](https://arxiv.org/abs/2407.21783)\.
- Grice \(1975\)H\. Paul Grice\.Logic and conversation\.In*Syntax and Semantics 3: Speech Acts*, pp\. 41–58\. Academic Press, 1975\.
- Gu et al\. \(2024\)Yuling Gu, Oyvind Tafjord, Hyunwoo Kim, Jared Moore, Ronan Le Bras, Peter Clark, and Yejin Choi\.SimpleToM: Exposing the gap between explicit ToM inference and implicit ToM application in LLMs, 2024\.URL[https://arxiv\.org/abs/2410\.13648](https://arxiv.org/abs/2410.13648)\.
- Jiang et al\. \(2023\)Albert Q\. Jiang et al\.Mistral 7b, 2023\.URL[https://arxiv\.org/abs/2310\.06825](https://arxiv.org/abs/2310.06825)\.
- Kwon \(2026\)Alex Kwon\.Reclaim evaluation: A lossy memory is worse than an empty one, 2026\.URL[https://arxiv\.org/abs/2606\.25449](https://arxiv.org/abs/2606.25449)\.
- Li et al\. \(2023\)Kenneth Li, Oam Patel, Fernanda Viégas, Hanspeter Pfister, and Martin Wattenberg\.Inference\-time intervention: Eliciting truthful answers from a language model\.In*Advances in Neural Information Processing Systems \(NeurIPS\)*, 2023\.
- Ouyang et al\. \(2022\)Long Ouyang, Jeffrey Wu, Xu Jiang, Diogo Almeida, Carroll Wainwright, Pamela Mishkin, Chong Zhang, Sandhini Agarwal, Katarina Slama, Alex Ray, et al\.Training language models to follow instructions with human feedback\.In*Advances in Neural Information Processing Systems \(NeurIPS\)*, 2022\.
- Paszke et al\. \(2019\)Adam Paszke et al\.Pytorch: An imperative style, high\-performance deep learning library\.In*Advances in Neural Information Processing Systems \(NeurIPS\)*, 2019\.
- Pedregosa et al\. \(2011\)Fabian Pedregosa et al\.Scikit\-learn: Machine learning in python\.*Journal of Machine Learning Research*, 12:2825–2830, 2011\.
- Qwen Team \(2024\)Qwen Team\.Qwen2\.5 technical report, 2024\.URL[https://arxiv\.org/abs/2412\.15115](https://arxiv.org/abs/2412.15115)\.
- Reimers & Gurevych \(2019\)Nils Reimers and Iryna Gurevych\.Sentence\-bert: Sentence embeddings using siamese bert\-networks\.In*Proceedings of EMNLP\-IJCNLP*, 2019\.
- Rimsky et al\. \(2024\)Nina Rimsky, Nick Gabrieli, Julian Schulz, Meg Tong, Evan Hubinger, and Alexander Matt Turner\.Steering llama 2 via contrastive activation addition\.In*Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics \(Volume 1: Long Papers\)*, 2024\.
- Ruis et al\. \(2023\)Laura Ruis, Akbir Khan, Stella Biderman, Sara Hooker, Tim Rocktäschel, and Edward Grefenstette\.The goldilocks of pragmatic understanding: Fine\-tuning strategy matters for implicature resolution by LLMs\.In*Advances in Neural Information Processing Systems \(NeurIPS\)*, volume 36, pp\. 20827–20905, 2023\.
- Sharma et al\. \(2024\)Mrinank Sharma, Meg Tong, Tomasz Korbak, David Duvenaud, Amanda Askell, Samuel R\. Bowman, et al\.Towards understanding sycophancy in language models\.In*International Conference on Learning Representations \(ICLR\)*, 2024\.
- Stolfo et al\. \(2025\)Alessandro Stolfo, Vidhisha Balachandran, Safoora Yousefi, Eric Horvitz, and Besmira Nushi\.Improving instruction\-following in language models through activation steering\.In*International Conference on Learning Representations \(ICLR\)*, 2025\.
- Turner et al\. \(2023\)Alexander Matt Turner, Lisa Thiergart, Gavin Leech, David Udell, Juan J\. Vazquez, Ulisse Mini, and Monte MacDiarmid\.Activation addition: Steering language models without optimization\.*arXiv preprint arXiv:2308\.10248*, 2023\.URL[https://arxiv\.org/abs/2308\.10248](https://arxiv.org/abs/2308.10248)\.
- Wolf et al\. \(2020\)Thomas Wolf et al\.Transformers: State\-of\-the\-art natural language processing\.In*Proceedings of EMNLP: System Demonstrations*, pp\. 38–45, 2020\.
- Zou et al\. \(2023\)Andy Zou, Long Phan, Sarah Chen, James Campbell, Phillip Guo, Richard Ren, Alexander Pan, Xuwang Yin, Mantas Mazeika, Ann\-Kathrin Dombrowski, et al\.Representation engineering: A top\-down approach to ai transparency\.*arXiv preprint arXiv:2310\.01405*, 2023\.URL[https://arxiv\.org/abs/2310\.01405](https://arxiv.org/abs/2310.01405)\.

## Appendices

[AStimuli and phrasings](https://arxiv.org/html/2607.03598#A1)\.A [BProbe and controls](https://arxiv.org/html/2607.03598#A2)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.B [CSteering procedure](https://arxiv.org/html/2607.03598#A3)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.C [DSpecificity: permutation detail](https://arxiv.org/html/2607.03598#A4)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.D [ECeiling\-model geometry \(inconclusive\)](https://arxiv.org/html/2607.03598#A5)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.E [FOpener\-biasing control \(full numbers\)](https://arxiv.org/html/2607.03598#A6)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.F [GCross\-model direction transport \(exploratory\)](https://arxiv.org/html/2607.03598#A7)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.G [HRequest\-matched construct control \(full numbers\)](https://arxiv.org/html/2607.03598#A8)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.H [ISecond intent axis: vent vs solve](https://arxiv.org/html/2607.03598#A9)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.I [JThird intent axis: support vs help](https://arxiv.org/html/2607.03598#A10)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.J [KPer\-model probe, BoW, and steer layer](https://arxiv.org/html/2607.03598#A11)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.K [LNaturalistic transfer \(full numbers\)](https://arxiv.org/html/2607.03598#A12)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.L [MReproducibility](https://arxiv.org/html/2607.03598#A13)\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.M

## Appendix AStimuli and phrasings

Sixty objects are crossed with eight lexically diverse phrasings of each intent\. Each object’s recognize and evaluate stimulus share an identical suffix of the form “Okay, here it is: the<object\>\. It works now\.” \(rotated over three suffix templates\), with the intent set only by the prefix\. Leave\-one\-phrasing\-out cross\-validation groups by phrasing\-pair, so train and test never share a wording\. Recognize prefixes express sharing without a request for evaluation; evaluate prefixes request critical assessment\.

## Appendix BProbe and controls

The probe isℓ2\\ell\_\{2\}logistic regression \(C=1\.0C\{=\}1\.0\) on standardized, PCA\-reduced \(≤40\\leq 40component\) last\-token activations, scored by GroupKFold over the eight phrasing groups\. The empirical chance ceiling is the mean and max accuracy under ten label permutations evaluated through the identical pipeline\. The bag\-of\-words baseline is TF\-IDF on the full message text under the same grouped cross\-validation\. A deliberately leaked control \(lexically distinct prefixes, no held\-out\-phrasing protocol\) yields1\.001\.00at every layer including layer 6, illustrating the surface artifact the main design controls for\.

### Embedding cross\-check of the honoring measure\.

The feedback\-offer lexicon is corroborated by an independent sentence\-embedding classifier that labels each reply by cosine to hand\-written feedback versus acknowledgment prototypes \(no shared vocabulary with the lexicon\)\. On the recover experiment the two measures agree per\-reply \(13/1613/16default,16/1616/16steered\) and reach the same conclusion: default honoring12/1612/16\(lexicon\) and11/1611/16\(embedding\), rising to16/1616/16under both after steering\. Extending the embedding measure to the full recognize set with the feedback centroid taken from the model’s*own*evaluate\-intent replies, per\-model agreement \(four models\) is0\.900\.90–0\.980\.98on steered replies but only0\.570\.57–0\.880\.88on default ones: the embedding*over*\-counts honoring on default \(Qwen\-7B0\.900\.90against the lexicon’s0\.600\.60\), keying on register rather than content, its disagreements being warm replies that still offer unsolicited feedback \(“That’s fantastic\!… here are a few tips”\) scored as acknowledgment on their tone\. A semantic measure that*under*\-counts the discard, rather than over\-counting it, is further evidence the lexicon does not inflate the effect\.

## Appendix CSteering procedure

The steering direction at a layer is the unit\-normalized logistic weight vector fit on the layer’s raw last\-token activations\. The vector is added to the residual stream at the predicting \(last\) position of the target decoder layer during generation, scaled byα\\alphatimes the layer’s mean activation norm so the coefficient is comparable across layers\. Behavior is scored by a coherence guard \(minimum length and unique\-token ratio\) followed by a feedback\-offer lexicon \(the reply offers feedback/critique/help, or only acknowledges\)\. The sanity gate requires that steering toward evaluate yield more feedback\-offering than steering toward recognize at the same coefficient; layers and coefficients failing the gate are not read\.

Causal steering dose\-response on Qwen\-3B at layer 30 \(probe\-weight direction, last\-position,n=60n\{=\}60recognize items, bootstrap95%95\\%CI\): recognize\-intent honoring climbs monotonically with dose and the baseline and full\-dose intervals are disjoint; coefficient1\.51\.5breaks coherence and is excluded\.

## Appendix DSpecificity: permutation detail

At each model’s validated steer layer we compare the behavior separationS=feedback​\(\+dir\)−feedback​\(−dir\)S=\\mathrm\{feedback\}\(\+\\text\{dir\}\)\-\\mathrm\{feedback\}\(\-\\text\{dir\}\)of the true \(logistic\-weight\) direction against directions fit on permuted intent labels \(twelve\) and random directions of matched norm \(forty\-eight\), each scored over the same2424\-item subset\. Qwen\-3B \(layer 30\): trueS=14S\{=\}14; shuffledS∈\{−10,−7,−6,−5,−4,0,2,3,4,7,10,10\}S\\in\\\{\-10,\-7,\-6,\-5,\-4,0,2,3,4,7,10,10\\\}, all below1414; random\|S\|≤13\|S\|\\leq 13, none reaching the true value \(permutationp=0\.02p\{=\}0\.02\)\. Qwen\-7B \(layer 16\): trueS=16S\{=\}16; shuffledS∈\{−10,−10,−8,−6,−5,−2,−1,0,5,6,8,9\}S\\in\\\{\-10,\-10,\-8,\-6,\-5,\-2,\-1,0,5,6,8,9\\\}, all below1616; random\|S\|≤15\|S\|\\leq 15, none reaching the true value \(p=0\.02p\{=\}0\.02\)\. Neither control reaches the true separation on either model\. Shuffled\-label permutation is nonetheless a conservative control: on a very strong axis a permutation can partially correlate with true intent \(in an earlier run one of twelve shuffled directions tied the true separation on Qwen\-7B\), so we report the full distribution rather than select a favorable statistic\.

![Refer to caption](https://arxiv.org/html/2607.03598v1/x2.png)Figure 2:The effect requires the learned direction\.Distribution of the behavior separationS=feedback​\(toward\-evaluate\)−feedback​\(toward\-recognize\)S=\\mathrm\{feedback\}\(\\text\{toward\-evaluate\}\)\-\\mathrm\{feedback\}\(\\text\{toward\-recognize\}\)for4848random directions of matched norm \(gray\) and1212shuffled\-label directions \(blue\), against the true intent direction \(red line\)\. On both models the true direction sits beyond the entire control distribution; no random or shuffled direction reaches it \(permutationp=0\.02p\{=\}0\.02\)\.![Refer to caption](https://arxiv.org/html/2607.03598v1/x3.png)Figure 3:Represented before routed\.Per layer, how decodable the intent is \(blue, probe accuracy\) and how much steering*at that layer*recovers recognize\-intent honoring \(red, with bootstrap95%95\\%CIs\), against the default baseline \(dotted\)\. On both models the probe saturates at layers where steering has not yet lifted honoring above baseline; recovery arrives only deeper \(late and sharp for Qwen\-3B, earlier and more diffuse for Llama\-8B\)\. The gap between the blue and red onsets is the discard\.n=60n\{=\}60\.
## Appendix ECeiling\-model geometry \(inconclusive\)

We asked whether the across\-model stratification \(Section[7](https://arxiv.org/html/2607.03598#S7)\) has a geometric signature: do the ceiling models, which honor recognize\-intent by default, align their intent representation with the readout more than the discard models do? We pre\-registered, before running, the metricM=\|cos⁡\(intent direction,readout direction\)\|M=\|\\cos\(\\text\{intent direction\},\\text\{readout direction\}\)\|, where the intent direction is the final\-layer logistic recognize\-vs\-evaluate weight and the readout direction is the fixed acknowledgment\-minus\-feedback opener unembedding difference, with the decision rule that the three ceiling models’MMmust lie clearly above the three discard models’\.*The result does not meet the rule\.*Discard models:M∈\{0\.12,0\.06,0\.07\}M\\in\\\{0\.12,0\.06,0\.07\\\}; ceiling models:\{0\.14,0\.30,0\.00\}\\\{0\.14,0\.30,0\.00\\\}\. Two of three ceiling models \(Mistral0\.300\.30, Qwen\-14B0\.140\.14\) exceed the discard range, but Phi\-3\.5 is the lowest of all six \(0\.000\.00\), so there is no clean separation; the group means differ \(0\.150\.15vs0\.080\.08\) but the pre\-registered separation criterion fails\. A secondary operationalization \(the direction separating honored from discarded default replies, computable only where both classes occur\) givesM≤0\.08M\\leq 0\.08throughout with no pattern\. Per our pre\-commitment we report the geometry as inconclusive and make no mechanism claim from it; the across\-model claim rests on the behavioral stratification and the depth localization alone\.

## Appendix FOpener\-biasing control \(full numbers\)

For the deflationary control of Section[9](https://arxiv.org/html/2607.03598#S9), at each discard model’s validated steer layer, matched activation norm, generating at a100100\-token budget \(longer than the4545\-token specificity run so the reply has a body\), we compare four quantities over the same2424\-item subset:StrueS\_\{\\mathrm\{true\}\}, the behavior separation from steering the learned intent direction;SopenerS\_\{\\mathrm\{opener\}\}, from steering the acknowledgment\-minus\-feedback opener\-unembedding direction directly;SrestS\_\{\\mathrm\{rest\}\},StrueS\_\{\\mathrm\{true\}\}recomputed with each reply’s first sentence removed; and\|cos\|\|\\cos\|between the intent and opener directions at that layer\.

On Qwen\-7B the opener direction at matched norm degrades coherence before it honors \(2/242/24coherent\), andSrestS\_\{\\mathrm\{rest\}\}equals the fullStrueS\_\{\\mathrm\{true\}\}, so intent steering reorients the body, not the opener\. On Llama\-8B the longer budget lifts the true separation clear of the random ceiling \(S=7S\{=\}7vsmax⁡\|S\|=3\\max\|S\|\{=\}3\) where the4545\-token run left it tied, the opener direction is inert \(Sopener=1S\_\{\\mathrm\{opener\}\}\{=\}1\), andSrest=4S\_\{\\mathrm\{rest\}\}\{=\}4shows a modest body effect\. On Qwen\-3B the true separation*dilutes*at this budget \(S=4S\{=\}4, belowmax⁡\|S\|=12\\max\|S\|\{=\}12\): steered toward acknowledgment the small model acknowledges first but drifts back into feedback over a long reply \(negative\-side feedback rises from3/243/24at4545tokens to17/2417/24at100100\), so the body test is inconclusive on 3B and its refutation rests on the norm\-independent near\-orthogonality \(\|cos\|=0\.14\|\\cos\|\{=\}0\.14\) and the opener direction’s incoherence\. At the4545\-token budget of Section[9](https://arxiv.org/html/2607.03598#S9)the 3B separation is strong \(Strue=14S\_\{\\mathrm\{true\}\}\{=\}14\), so the dilution is a generation\-length effect, and the intervention on the smallest model is front\-loaded\. The load\-bearing evidence against opener\-biasing is the near\-zero cosine on all three models and the body reorientation on Qwen\-7B \(and, more modestly, Llama\-8B\)\. Script:experiments/modal\_opener\_control\.py\.

## Appendix GCross\-model direction transport \(exploratory\)

The models do not share a hidden size, so a direction cannot transfer verbatim\. We fit a linear map from Qwen\-3B activations to Llama\-8B activations on a train split of stimuli and transport Qwen’s intent direction into Llama’s space\. The transported direction lands at cosine0\.850\.85to Llama’s*own*intent direction, and steering Llama with it recovers honoring \(0\.56→1\.000\.56\\to 1\.00on held\-out items\)\. We keep this out of the main text and flag it as exploratory: the map’s held\-out activationR2R^\{2\}is negative \(it aligns the intent direction, it does not reconstruct activation space\), and a random direction of matched norm gives partial non\-specific recovery \(0\.690\.69\), so the signal is the direction alignment, not the raw steering number\. Read as suggestive that the intent axis is shared up to a linear map, not as an isomorphism claim\.

## Appendix HRequest\-matched construct control \(full numbers\)

For the construct\-validity control of Section[3](https://arxiv.org/html/2607.03598#S3), both intent classes carry an explicit directive so that request\-presence is held constant and only the content of the request differs; recognize prefixes become requests for acknowledgment \(“please just celebrate this with me, I really don’t want any notes”; “do me a favor and just take it in, don’t give me feedback”; eight in all\), paired with the unchanged evaluate directives and the same surface\-matched suffix\. Probe accuracy is leave\-one\-phrasing\-out CV at three depths; the bag\-of\-words baseline uses the same phrasing folds\.

The probe clears the bag\-of\-words baseline by roughly0\.250\.25–0\.300\.30on every model with request\-presence matched\. The baseline is higher than the surface\-matched set’s0\.480\.48because celebration\-requests and critique\-requests use different content words; that residual lexical signal is exactly what the surface\-matched design \(Table[1](https://arxiv.org/html/2607.03598#S3.T1)\) controls, and the two designs together rule out both confounds\. Script:experiments/modal\_request\_matched\.py\.

## Appendix ISecond intent axis: vent vs solve \(full numbers\)

To test that the represents\-discard\-recover chain is not specific to the recognize\-versus\-evaluate contrast, we replicate it on a different intent:*vent*\(“I’m not looking for advice, I just need to be heard”\) versus*solve*\(“give me concrete steps to fix this”\), behavior scored by whether the reply offers a solution, surface\-matched stimuli built as before on Qwen2\.5\-3B and Llama\-3\.1\-8B\. Intent decodes at probe1\.001\.00\(Qwen\-3B\) and0\.970\.97\(Llama\-8B\) at the surface\-matched token\. Atn=60n\{=\}60with bootstrap CIs, Qwen\-3B honors the vent intent only0\.700\.70by default and steering recovers it to0\.980\.98\(non\-overlapping\); Llama\-8B already honors it at0\.880\.88baseline \(ceiling\), so steering only nudges it to0\.980\.98\. The representation holds on both; the clean discard\-then\-recovery is on the model that discards\. This axis is more lexically marked than the first: a bag\-of\-words classifier reaches0\.790\.79on the full text \(versus0\.460\.46–0\.480\.48on recognize\-vs\-evaluate\), so it does more to show the behavior generalizes to a second intent than to re\-establish surface\-independent representation\.

Table 4:Prompting vs routing on Qwen2\.5\-3B,n=60n\{=\}60, bootstrap95%95\\%CI \(full numbers for Section[11](https://arxiv.org/html/2607.03598#S11)\)\. An explicit prompt \(0\.930\.93\) and steering \(0\.980\.98\) are interchangeable \(overlapping intervals\) and stack \(1\.001\.00\): the represented direction is a handle as good as the instruction, with no prompt\. A vague nudge backfires \(0\.65→0\.450\.65\\to 0\.45\)\.
## Appendix JThird intent axis: support vs help \(full numbers\)

The support\-versus\-help axis \(Section[8](https://arxiv.org/html/2607.03598#S8)\) is inferred and lexically clean\. Per model:

Bag\-of\-words sits at0\.570\.57against probe0\.710\.71–0\.860\.86on all six models, so the*representation*generalizes to a genuinely different, fully inferred intent\. Behaviorally the readout tracks the intent only weakly \(help\-intent draws unsolicited solutions more than support\-intent\), and steering the direction*fails*the specificity control \(Section[8](https://arxiv.org/html/2607.03598#S8)\), so we claim the representation\-generalization here, not a causal handle\.n=40n\{=\}40per intent\.

## Appendix KPer\-model probe, bag\-of\-words, and steer layer

Table[5](https://arxiv.org/html/2607.03598#A11.T5)tabulates the per\-model probe, bag\-of\-words, and steer\-layer figures referenced in Section[7](https://arxiv.org/html/2607.03598#S7), across all six models and four families\.

Table 5:Representation and steer layer across six models, four families \(recognize/evaluate axis\)\. Intent decodes at probe1\.001\.00with bag\-of\-words at chance \(≤0\.48\\leq 0\.48\) everywhere: the representation is not a small\-model or single\-family artifact\. The steer layer, and its fraction of depth, is model\-specific\. The behavioral discard and recovery, model\-specific, are quantified atn=60n\{=\}60in Table[2](https://arxiv.org/html/2607.03598#S7.T2)\. A seventh model, Qwen2\.5\-32B, is run probe\-and\-honoring only: it represents the intent \(probe0\.990\.99stated,0\.930\.93inferred\) and honors it at baseline \(0\.780\.78/0\.770\.77\), so it has no discard to steer \(Section[7](https://arxiv.org/html/2607.03598#S7)\)\.
## Appendix LNaturalistic transfer \(full numbers\)

A reader may suspect the synthetic, surface\-matched stimuli drive the effect\. We test whether the probe and the steering direction, both fit only on templates, transfer to hand\-written non\-templated messages \(varied length, register, and topic; e\.g\. “just got back from my first 5k, didn’t stop once”\)\. On2323such messages the template\-trained probe classifies their intent at1\.001\.00\(layer 24\), and the behavioral chain reproduces: default honoring0\.620\.62\(the same discard\), steering recovers it to1\.001\.00\(23/2323/23coherent\), and genuinely\-evaluate messages correctly draw feedback \(0\.080\.08honoring\)\. A direction learned on templates governs behavior on real messages; the sample is small \(n=23n\{=\}23, hand\-written by the author\)\.

## Appendix MReproducibility

Reproduce``` pip install -e . # core chain (CPU; downloads Qwen2.5-3B-Instruct) python experiments/probe_intent.py # represents (leave-phrasing-out) python experiments/same_model_discard.py # discards (same model) python experiments/steer_probe_sweep.py # find the causal layer python experiments/steer_dose.py # dose-response confirmation pytest # pipeline + no-leak guards # extended experiments (GPU, via Modal) modal run experiments/modal_sweep.py # generality ladder (6 models) modal run experiments/modal_scale.py # discard/recover, n=60 modal run experiments/modal_specificity2.py # spec controls modal run experiments/modal_localize2.py # depth localization modal run experiments/modal_natural.py # naturalistic transfer ```

The core probe is CPU\-only and downloads Qwen2\.5\-3B\-Instruct; the extended experiments run on a single A100 through Modal \([https://modal\.com](https://modal.com/)\), and the behavioral elicitation uses API keys\. Code, stimuli, and all experiment scripts are available at[https://github\.com/collapseindex/recipient\-probe](https://github.com/collapseindex/recipient-probe)\.

### Software\.

Experiments use PyTorch\(Paszke et al\.,[2019](https://arxiv.org/html/2607.03598#bib.bib14)\), HuggingFace Transformers\(Wolf et al\.,[2020](https://arxiv.org/html/2607.03598#bib.bib23)\), scikit\-learn\(Pedregosa et al\.,[2011](https://arxiv.org/html/2607.03598#bib.bib15)\)for the probes and steering fits, and sentence\-transformers\(Reimers & Gurevych,[2019](https://arxiv.org/html/2607.03598#bib.bib17)\)for the independent embedding measure \(Section[5](https://arxiv.org/html/2607.03598#S5)\)\.