Research · Academic & arXiv

Back to sweep

Research sweep · deep · 2021 – 2026

Weight-Space Programming

Reading and rewriting neural networks from their weights, November 2021 to November 2026: LLM-driven weight-space programming (MIT CSAIL's Sparks of Weight-Space Programming, GPT-6 Astra, Qwen3.5), weight-space learning (DWSNets, neural functionals, graph metanetworks, SANE), mechanistic interpretability (Chris Olah's circuits and feature visualisation, sparse autoencoders, Goodfire), and direct model editing (ROME, activation steering), compared on what each can actually infer or change.

  • Claude Fable 5.1
  • frontier
  • academic
  • blogs

Synthesised 2026-11-05

Narrative

The Astra result is a blog post with public logs, not a peer-reviewed paper. Rikiya Takehi, Jayden Teoh, Alex Zhang and Omar Khattab (MIT CSAIL) posted it on 2 November 2026, with experiment logs on GitHub and the edited Qwen model on Hugging Face (R&D World). The pooled claim covers eight experiments at very different scales and access levels. In the reading experiments, Astra received raw weights as text with no tools and no forward passes. It named the game behind a 17,253-weight network in 4 of 4 cases (R&D World, Turing Post, Explainx). The Qwen3.5-0.8B edit was a different kind of task. Astra had Python and up to 50 practice batches. It changed 131,072 weights (0.016%) in layers 15 and 19, and MATH-500 rose from 7.9% to 48.1%. Answers hitting the token limit fell from 93% to 33% (R&D World, DataCamp, Turing Post). The 3.5% edit that took a control policy from 0% to 100% success was a single attempt with no tools (Explainx, DataCamp).

The evidence is thin on four counts. First, the prompt told Astra that fixing repetition counted, and Qwen's own model card already flags the looping (Turing Post). Second, Explainx reports that the same approach failed to improve a non-looping Gemma 3 270M. That suggests the edit removed an obstacle (a known failure mode) rather than adding a capability. Third, R&D World records critics (Honnibal, Goedecke) who call the Qwen fix standard steering and object to pooling different tool-access levels under one claim. Fourth, the only replication I found is a secondary social-media claim of reproduction on Qwen3.5-0.8B (alphaXiv aggregation), which is anecdotal. I found no ablation of simpler explanations for the game identification, such as weight statistics or output-layer structure, and no published harness.

Dedicated weight-space learning has a different profile. DWSNets (Navon et al., ICML 2023) built permutation-equivariant layers for MLP weight spaces and were demonstrated on INRs and small networks. Related work covers neural functionals, graph metanetworks (Lim et al., ICLR 2024), ScaleGMN (NeurIPS 2024) and a 2026 survey (arXiv 2603.10090). Recent preprints push towards transformers: a 2026 graph-metanetwork paper formalises the symmetry group of complete decoder-only language models and claims the first systematic application at that scale. Another 2026 result shows DWSNets and GMNs have equivalent expressive power on compact general-position sets. These methods are trained supervised predictors. They need many example networks and infer properties from weights alone. They do not edit anything, and their transformer-scale evidence is still preprint-level.

Direct editing has the most mature critical literature. ROME and MEMIT (Meng et al., NeurIPS 2022 and ICLR 2023) insert facts by rank-one or batched updates. Follow-up work found specificity side effects in GPT-J (6B) that earlier benchmarks missed, gradual then catastrophic forgetting under sequential edits, and brittleness in code LLMs. The refusal-direction paper (Arditi et al., NeurIPS 2024, 13 chat models up to 72B) shows that one removable direction mediates refusal. Abliteration turns that into a permanent weight edit. Follow-ups question the 'scalpel' framing, reporting off-target effects on decision disposition across model families and a dependence of post-abliteration compliance on model scale. This is the closest precedent for Astra's Qwen edit: it removes an obstacle, here a trained-in safeguard, rather than adding a skill. For sparse autoencoders, the retrieved sources show scaling laws (Gao et al.) alongside critiques that SAE features are not canonical units and that monosemanticity is unreliable. Olah's circuits and feature-visualisation papers, Goodfire, SANE, METR's HCAST and RE-Bench, and primary activation-steering papers did not surface in my searches, so they are not covered here.


Sources

ID Title Outlet Date Significance
a1 Sparks of Weight-Space Programming: LLMs can natively read & write neural network weights (alphaXiv listing) alphaXiv 2026-11 Aggregator entry for the MIT CSAIL blog post (2 Nov 2026) summarising the eight experiments and carrying a social-media claim of reproduction on Qwen3.5-0.8B; category (b), blog with public logs, replication anecdotal.
a2 FOD#174: What is Weight-Space Programming and why it suddenly blew up the internet? Turing Post 2026-11 Describes the Qwen setup: Astra compared internal signals in loops versus progress steps, the prompt hinted that fixing repetition counted, and 131,072 weights in layers 15 and 19 changed.
a3 Weight-Space Programming: How LLMs Edit Network Weights DataCamp 2026-11 Secondary summary giving the control-policy result (3.5% of weights, 0% to 100% success) and token-limit hits falling from 93% to 33% after the Qwen edit.
a4 Equivariant Architectures for Learning in Deep Weight Spaces (DWSNets) arXiv (ICML 2023) 2023-01 Foundational peer-reviewed (ICML 2023) weight-space architecture with permutation-equivariant layers, demonstrated on MLP and INR weight spaces, not LLMs.
a5 A Survey of Weight Space Learning: Understanding, Representation, and Generation arXiv 2026-03 Taxonomy of symmetry-agnostic, symmetry-aware and graph-based weight-space methods (DWSNets, NFN, NFT, UNF, NG, GMN), useful for mapping what the field covers.
a6 Equivariant Deep Weight Space Alignment arXiv (ICML 2024) 2023-10 Introduces Deep-Align, built on DWSNets, a weight-space task (aligning networks by permutation) distinct from property prediction.
a7 Scale Equivariant Graph Metanetworks arXiv (NeurIPS 2024) 2024-06 ScaleGMN adds rescaling symmetry to permutation symmetry in graph metanetworks (NeurIPS 2024), extending beyond permutation-only methods.
a8 Equivariant Neural Functional Networks for Transformers arXiv 2024-10 Extends neural functionals to attention symmetries, an early step towards symmetry-aware methods on transformers.
a9 Graph Metanetworks for Transformer Based Language Models arXiv 2026-10 Formalises the weight-space symmetry group of complete decoder-only LMs and claims first systematic weight-space learning at that scale; preprint.
a10 Finite Probes Suffice: Identifiability and Universality for Weight-Space Learning arXiv 2026-09 Proposes HiddenProbe, reporting state-of-the-art on neural functional benchmarks including transformers; shows probing (running the network) competes with pure weight reading.
a11 Scaling and evaluating sparse autoencoders arXiv 2024-06 Gao et al. (OpenAI) give a training recipe and clean scaling laws for SAEs with k-sparse autoencoders, the main quantitative basis for SAE interpretability at scale.
a12 Sparse Autoencoders Do Not Find Canonical Units of Analysis arXiv (ICLR 2025) 2025-02 Critical test of whether SAE features are the true units of a model, relevant to what feature mapping can claim.
a13 On the Limits of Sparse Autoencoders: A Theoretical Framework and Reweighted Remedy arXiv 2025-06 Theory of why SAEs shrink or lose features, with a reweighted fix evaluated by auto-interpretability scores.
a14 Measuring and Guiding Monosemanticity arXiv 2025-06 Introduces a feature monosemanticity score and argues SAEs give incomplete feature isolation, limiting reliable steering.
a15 Mass Editing Memory in a Transformer (MEMIT) arXiv (ICLR 2023) 2022-10 Foundational batch knowledge-editing method (up to 10,000 facts), with ROME degrading from about 32 edits in its comparison.
a16 Evaluating the ripple/side effects of model editing (specificity benchmark CounterFact+) arXiv 2023-06 Finds ROME and MEMIT have specificity side effects missed by standard benchmarks, tested on GPT-J (6B) across sizes.
a17 Model Editing at Scale leads to Gradual and Catastrophic Forgetting arXiv 2024-01 Shows sequential ROME and MEMIT edits cause gradual then abrupt forgetting, a durability limit on direct edits.
a18 Understanding Robustness of Model Editing in Code LLMs: An Empirical Study arXiv 2025-11 Finds parametric editors such as ROME, MEMIT and PMET brittle on code LLMs and failing under accumulation, extending edit-durability evidence to code models.
a19 Refusal in Language Models Is Mediated by a Single Direction arXiv (NeurIPS 2024) 2024-06 NeurIPS 2024 paper (13 chat models up to 72B) showing that ablating or adding one direction removes or induces refusal; basis for abliteration, an obstacle-removing edit.
a20 Comparative Analysis of LLM Abliteration Methods arXiv 2025-12 Compares open-source abliteration tools by attack success rate, and notes work challenging the strict single-direction hypothesis.
a21 Abliteration Is Not a Scalpel: Off-Target Effects of Refusal Removal on Decision Disposition Across Model Families arXiv 2026-07 Tests the claim of minimal capability cost, reporting off-target behavioural effects of refusal removal; bears on edit precision and side effects.
a22 Willing but Unable: Separating Refusal from Capability in Code LLMs via Abliteration arXiv 2026-06 Reports that post-abliteration compliance depends on model scale, supporting the distinction between unmasking a capability and having one.
a23 Sparks of Weight-Space Programming: LLMs can natively read… tldr.tech 2 days ago Retrieved by this lane's web search.
a24 MIT Lets GPT-6 Astra Directly Modify Qwen Weights, Math Scores Soar htx.com 2 days ago Retrieved by this lane's web search.
a25 Recursive Self-Similarity in Deep Weight Spaces of Neural Architectures: A Fractal and Coarse Geometry Perspective arxiv.org Retrieved by this lane's web search.

We use analytics cookies to understand site usage and improve the service. We do not use marketing cookies.