arXiv:2610.40939v1 Announce Type: new Abstract: Chain-of-thought (CoT) monitoring is a promising way to oversee increasingly capable agents. It succeeds in part because current models appear limited in their ability to control what they verbalize in their reasoning traces. We investigate the source of this limitation and link it to an entropy collapse in the first few tokens following the opening thinking tag. We exploit this mechanism to recover CoT controllability through two inference-time interventions on initial tokens: prefilling, where even a single token can substantially increase controllability, and banning frequent opening tokens combined with in-context examples, which improves average compliance by 34-41 percentage points across models. These interventions recover mainly addition and style controllability (adding or transforming information), while suppression controllability (avoiding or removing information) exhibits more varied responses, suggesting distinct underlying mechanisms. Consistent with this, the two groups behave as separate capabilities: across models, performance correlates positively within these groups, while cross-group correlations are mostly negative. Importantly, we find that the relationship with monitorability depends on the evaluation: addition and style controllability more consistently positively correlate with monitorability, while suppression often shows negative associations. Our findings motivate the development of controllability evaluations that distinguish difficulty initiating a specific opening from general limitations of the ability to alter reasoning content, alongside separate reporting of control tasks and categories.
The First Few Tokens Matter: Understanding Chain-of-Thought Controllability
A new arXiv paper (2610.40939v1) links models' limited control over their chain-of-thought reasoning traces to an entropy collapse in the first few tokens after the opening thinking tag, and shows two inference-time interventions on those initial tokens can recover controllability. Prefilling with even a single token substantially increases controllability, while banning frequent opening tokens combined with in-context examples improves average compliance by 34-41 percentage points across models. The authors report the interventions mainly recover addition and style controllability, while suppression controllability responds more variably and often correlates negatively with monitorability, arguing for controllability evaluations that separate difficulty initiating a specific opening from general limits on altering reasoning content.
Run your AI side-project on zahid.host
EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.