{"slug": "opening-token-controls-raise-cot-compliance-by-34-41-percentage-points", "title": "Opening-token controls raise CoT compliance by 34-41 percentage points", "summary": "An arXiv paper (2610.40939) reports that banning frequent opening tokens after the thinking tag, combined with in-context examples, raises LLM chain-of-thought compliance with controllability demands by 34 to 41 percentage points, and that prefilling a single token after the thinking tag can steer reasoning traces at inference time. The intervention works for adding or transforming reasoning steps but is largely ineffective at suppressing or hiding information from the trace, which the paper says weakens the safety assumption that models cannot strategically control their reasoning. The authors recommend evaluating addition/style and suppression controllability separately rather than treating monitorability as a single number.", "body_md": "[arXiv](https://arxiv.org/abs/2610.40939)\n\n### Opening-token controls raise CoT compliance by 34-41 percentage points\n\nWhich summary reads better? Pick one — models revealed after.Both summaries are AI-generated.\n\nLLM chain-of-thought reasoning paths are severely constrained by an entropy collapse in the first few tokens following the opening thinking tag, but banning these frequent opening tokens combined with in-context examples increases reasoning compliance by 34 to 41 percentage points. For production agents, you can actively steer and inject specific information into model reasoning traces at inference time by simply prefilling a single token after the thinking tag. However, while this cheap inference-time intervention excels at forcing the model to add or transform its reasoning steps, it remains largely ineffective at suppressing or hiding specific information from the trace.\n\nThe safety assumption that models can't strategically control their reasoning traces is weaker than it looks: entropy collapses in the first few tokens after the thinking tag, and prefilling even a single token—or banning common opening tokens plus in-context examples—raises compliance with controllability demands by 34–41 points. This means CoT monitoring is more spoofable than assumed, but only for adding or restyling reasoning content; suppressing information behaves as a separate, harder-to-steer capability, so don't treat \"monitorability\" as a single number—evaluate addition/style and suppression controllability independently or your oversight will give false assurance.", "url": "https://wpnews.pro/news/opening-token-controls-raise-cot-compliance-by-34-41-percentage-points", "canonical_source": "https://www.snipvote.com/story/cmvyxpulx0004e849fzd1k2un", "published_at": "2026-11-02 07:50:57.942750+00:00", "updated_at": "2026-11-02 07:50:59.780780+00:00", "lang": "en", "topics": ["ai-safety", "large-language-models", "ai-research", "artificial-intelligence"], "entities": ["arXiv", "chain-of-thought"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/opening-token-controls-raise-cot-compliance-by-34-41-percentage-points", "markdown": "https://wpnews.pro/news/opening-token-controls-raise-cot-compliance-by-34-41-percentage-points.md", "text": "https://wpnews.pro/news/opening-token-controls-raise-cot-compliance-by-34-41-percentage-points.txt", "jsonld": "https://wpnews.pro/news/opening-token-controls-raise-cot-compliance-by-34-41-percentage-points.jsonld"}}