From Representation to Readout: Mechanistic Analysis of Membership Signals in Language Models
This arXiv paper presents a mechanistic study of membership inference signals in large language models, introducing Decodable Information Score, Used Information Score, and Readout Accessibility Gap (DUG) to separate membership information in internal representations from information exposed through readout. Across supervised fine-tuning and reinforcement-learning-based membership inference methods, it reports membership-specific effects in both decodable information and readout under SFT, but primarily in readout under RL methods, with activation patching localizing effects to intermediate layers. The paper also examines reinforcement learning with verifiable rewards contamination and finds behavioral changes can emerge without a corresponding increase in likelihood-based membership inference signals.