Case · DiggingBeagle record

Two-neuron Qwen steering claim raises a reproducibility question

An October 26 Telegram repost attributes an unusual Qwen3.5-4B behavioral change to two activation adjustments. The author project documents neuron exploration, but the original X post was inaccessible and the exact result remains unreplicated.

Scope

The originating X post returned HTTP 403 to the permitted browser. Secondary reporting and an open-source viewer are not equivalent to an independent experiment; the asserted view count and claimed degradation of intelligence are not verified.

Assessment profile

Assessment method
Setting
research demonstration
Exploitation
not established
Evidence
Grade C
Remediation
not applicable
AI role
AGAINST AI
Basis and provenance

Enrich update: CLM-ENRICH-20261027-28 cites SRC-2026-CP21-QWEN-NEURON-EXPLORER at neuron-explorer repository README, project description and steering workflow. New evidence concerns the bounded reported mechanism, prerequisite or outcome; setting research_demonstration; exploit status not_established; remediation status not_applicable. No independently comparable impact scale, affected production population or universal exploit success measure was established, so the impact band remains null. Original Claims remain individually attributable and any observed incident or simulated result is distinguished in the narrative.

Assessed Oct 27, 2026 using diggingbeagle.assessment/1.

At a glance

Timeline

  1. Oct 26, 2026
    disclosure

    Public disclosure

Claims & evidence

CLM-ENRICH-20261027-28The author repository describes a Qwen3.5-4B neuron explorer that perturbs MLP activations and keeps rollouts for comparison, but its publicly displayed README does not contain the exact L14 N8949 and L13 N7956 steering pair repeated in secondary reports.supported

Basis: reported finding

Link to claim
CLM-CP21-QWEN-TWO-NEURON-STEERING-1A secondary article attributes to an X demonstration the claim that increasing neuron L14 N8949 by one and decreasing neuron L13 N7956 by one changes Qwen3.5-4B output behavior. The underlying author repository provides neuron-exploration tooling but does not independently establish the particular effect.supported

Basis: reported finding

Link to claim

Implications

A small number of influential activations can be worth auditing in safety evaluations, but the current evidence only supports a reported demonstration and a plausible technique, not a new production exploit.

Controls and mitigations

  • Verify the model hash, inference runtime, before-and-after outputs and control prompts before turning the claimed personality shift into a measured refusal-bypass or jailbreak rate.

Unknowns and contradictions

  • The originating X post returned HTTP 403 to the permitted browser. Secondary reporting and an open-source viewer are not equivalent to an independent experiment; the asserted view count and claimed degradation of intelligence are not verified.

Sources and citation

Material revision history

  1. Oct 27, 2026 · Canonical change recorded · new in release · revision 196