AI Models Can Provably Hide Arbitrary Capabilities

Researchers show that capability evaluations cannot reliably elicit hidden model behaviors under adversarial conditions. They construct backdoor attacks by embedding encrypted neural networks within host model weights that execute only upon receiving a secret trigger. These hidden circuits remain provably hard to elicit and interpret even with full access to model weights.