Subliminal Prompting Beyond Static Geometry: Causal Depth and Multi-Token Confounds
A study on Llama-3.1 and Qwen separates four properties of a hidden prompting channel: fixed geometry, observational readability, causal control, and multi-token measurement. Fixed output-vector similarity loses predictive power from 8B to 70B, while...