Perplexity Can Miss SAE Feature Damage Under Quantization
- company Microsoft
- lab Anthropic
- lab DeepMind
- lab Meta AI
- lab OpenAI
- location Taiwan
- product Roth IRA
- product iPhone 16
A new study finds that perplexity scores can mask significant damage to the internal features of large language models after quantization, a common compression technique used for deployment. The research, led by Evan Duan, demonstrates that a quantized model can maintain or even improve its perplexity while a substantial fraction of its interpretable features, as measured by sparse autoencoders (SAEs), are degraded or destroyed [1]. The study used a frozen SAE as a fixed measurement basis to compare full-precision and round-to-nearest (RTN) quantized activations on identical tokens across models including Pythia-70M and Gemma-2-2B [2]. On Gemma-2-2B, INT7 quantization actually improved perplexity, yet 18.7% of active SAE features were degraded [1]. Under a sliding-window evaluation, INT6 also improved perplexity while only 51.3% of active features survived [2]. The paper describes this feature damage as "graded rather than cliff-like," with most non-surviving features being blurred instead of fully destroyed [1]. The survival rate for active Pythia features at INT6 was 62.4% [2]. The study also found that feature survival is highly predictable from full-precision feature statistics alone, achieving a cross-validated AUC between 0.92 and 0.97, with peak activation being the strongest marginal predictor [1]. Furthermore, the research showed that RTN quantization and magnitude pruning, when matched for perplexity, damage strongly overlapping sets of features, with a Jaccard overlap of 0.79 to 0.86 and a Spearman correlation of 0.98 for their damage scores [2]. These findings challenge the common industry practice of relying on behavioral metrics like perplexity as sufficient evidence for model integrity after compression. The broader context of AI model evaluation is already under scrutiny. A separate analysis of documentation for frontier models, including those from Anthropic and Microsoft, found systematic gaps in transparency, with safety-critical categories like deception behaviors and hallucinations accounting for the largest deficits across evaluated systems [3]. This documentation gap parallels the study's core warning: surface-level metrics can obscure deeper issues in model behavior and reliability. The research motivates feature-level audits for compressed models, arguing that full-precision interpretability findings cannot be assumed to transfer to their quantized counterparts without direct verification [1].
research-papersafety-research
Background sources we checked (6)
- arxiv.org ↗ Quantization is a standard path to deploying large language models, and quantized models are typically judged acceptable when perplexity or downstream accuracy remains close to the full-precision original. But behavioral parity need not imply feature fidelity: the sparse-autoenco…
- arxiv.org ↗ AI model documentation is fragmented across platforms and inconsistent in structure, preventing policymakers, auditors, and users from reliably assessing safety claims, data provenance, and version-level changes. We analyzed documentation from five frontier models (Gemini 3, Grok…
- arxiv.org ↗ The CIA security triad - Confidentiality, Integrity, and Availability - is a cornerstone of data and cybersecurity. With the emergence of large language model (LLM) applications, a new class of threat, known as prompt injection, was first identified in 2022. Since then, numerous …
- en.wikipedia.org ↗ Anthropic PBC is an American artificial intelligence (AI) company headquartered in San Francisco, California. It has developed a series of large language models (LLMs) named Claude and has a focus on AI safety. Anthropic was founded in 2021 by former members of OpenAI, including …
- en.wikipedia.org ↗ Claude is a series of large language models developed by American software company Anthropic. Claude was released as an AI-based chatbot in March 2023. It is also used in AI-assisted software development. Claude is trained using "constitutional AI", a technique developed by Anthr…
- en.wikipedia.org ↗ Microsoft Corporation is an American multinational technology company headquartered in Redmond, Washington. The company became influential in the rise of personal computers through software like Windows and has since expanded into areas such as Internet services, cloud computing,…
Sources covering this (2)
- export.arxiv.org — Perplexity Can Miss SAE Feature Damage Under Quantization ↗
- export.arxiv.org — Quality Is Not a Safety Proxy Under Quantization · Global