Ulterior Motives: Detecting Misaligned Reasoning in Continuous Thought Models

The paper's sharpest contribution isn't the benchmark itself but the dual-mechanism backdoor design, which separates misaligned reasoning that's hidden in latent space from misaligned outputs, meaning a model can behave correctly on the surface while its internal reasoning process is compromised in ways no current tool can flag.

This connects directly to the reliability-of-evaluation thread running through recent coverage. The JudgeSense paper (published the same day) showed that LLM-as-a-judge systems produce unstable verdicts under prompt variation, and this paper adds a harder problem: if the reasoning being evaluated never surfaces as readable tokens, judge-based auditing may be structurally incapable of catching misalignment, not just unreliable at it. Both papers are, in different ways, stress-testing the assumption that automated evaluation can serve as a safety backstop. The supernodes work from April 26 is less directly connected, though its finding that a small fraction of channels carry disproportionate model behavior does raise adjacent questions about where misaligned computation might concentrate.

Watch whether any of the major continuous thought model developers (particularly those with published latent-reasoning architectures) respond to MoralChain with either a rebuttal of the threat model or an integration of the benchmark into their safety evaluations within the next six months. Silence would itself be informative.