Hunar Batra, Lachin Naghashyar, Ashkan Khakzar, Philip Torr, Christian Schroeder de Witt, Constantin Venhoff, Ronald Clark
5 min
Multimodal Large Language Models (MLLMs) possess impressive visual capabilities, but their internal mechanisms remain largely opaque. Researchers struggle to identify which internal features drive specific behaviors, making it difficult to audit or steer these models without expensive retraining. This paper introduces MMDiff, a framework that uses sparse autoencoders (SAEs) to create a feature-level interface for MLLMs. By comparing SAEs trained on a base language model against those trained on the multimodal-adapted version, the authors isolate features that were specifically reshaped or repurposed by multimodal training. The pipeline involves three key steps: isolating visually responsive features, identifying task-specific subsets through contrastive firing analysis, and applying causal interventions to remove or steer these features.
MMDiff successfully identifies sparse, causally specific features across three MLLM families: LLaVA-MORE, PaliGemma 2, and InternVL3.5. The authors demonstrate that these features are not just interpretability artifacts but functional control handles. Causal removal of these features selectively degrades target behaviors—reducing spatial reasoning accuracy by 12%, OCR accuracy by 17%, and multimodal safety attack success rates by 24%—without negatively impacting general visual question answering performance. Furthermore, the authors introduce MMDiff-CAA, a steering method that combines backbone activation steering with the injection of specific SAE decoder directions. This approach improves spatial and OCR accuracy by an average of 3.6% and 1.8%, respectively, outperforming standard single-layer steering baselines.
This work provides a bridge between interpretability and model control. By demonstrating that multimodal SAEs can serve as mechanisms for auditing and steering, the authors offer a path toward safer and more reliable MLLMs. The ability to selectively suppress unsafe behaviors or enhance specific capabilities like spatial reasoning without retraining the entire model is a significant step forward for model governance and alignment.
Multimodal Large Language Models (MLLMs) exhibit strong visual understanding, yet the internal features that cause these behaviors remain difficult to identify, audit, or control. While applicable to post-hoc inspection, hidden states that are decomposed into interpretable feature directions using sparse autoencoders (SAEs) neither readily isolate which features are changed by multimodal training, nor are they directly useful for targeted control. We introduce MMDiff, a multimodal model-diffing framework that trains multimodal SAEs and turns them into feature-level interfaces for discovering and controlling multimodal behavior. MMDiff supports three uses: (i) feature isolation, by diffing a base-LM SAE against its multimodal-adapted counterpart to identify features altered by multimodal training; (ii) task-specific feature detection, via per-token contrastive firing analysis that isolates causal features; and (iii) feature-level control, by causally removing or steering the discovered feature directions. We train multimodal SAEs for three MLLM families, LLaVA-MORE, PaliGemma 2, and InternVL3.5, and evaluate on visual-spatial understanding, multimodal safety, and OCR. MMDiff discovers sparse, causally specific features whose removal selectively degrades target behaviors by an average of 12% on spatial tasks and 17% on OCR, and reduces attack success rate by 24% on multimodal safety attacks, with no impact on VQA performance. Steering these features improves spatial and OCR accuracy by +3.6% and +1.8% on average over a standard single-layer steering baseline. These results show that multimodal SAEs can serve not only as interpretability tools, but as mechanisms for auditing, steering, and controlling MLLMs behavior toward safer and more capable generations.
Sam: So you're not just looking for features that react to images — you're looking for ones that were rebuilt to handle them.
Alex: Exactly. And there's one more filtering step. They check whether a feature fires because of the image itself, or just because of how the question is phrased. If swapping the wording changes the response but the image stays the same, that feature isn't really doing visual reasoning — it's doing language pattern-matching.
Sam: So they end up with a set of features that are genuinely tied to what the model sees, not how the prompt is worded.
Alex: Right. And once those features are identified, researchers can intervene on them directly — nudging the model's behavior by adjusting specific internal directions during generation, without touching anything else.
Sam: What does that look like in practice?
Alex: Imagine you've found the exact shelf in the library that handles spatial reasoning — like understanding whether an object is to the left or right of another. You can quietly reorganise just that shelf, and the rest of the library stays intact. The paper reports that focusing on these specific adapted units produces predictable shifts in behavior without disrupting the wider network.
Sam: Though I imagine it's not always that clean.
Alex: It isn't, and the authors are upfront about that. A small number of safety-targeted interventions — where you try to suppress an unsafe behavior — can occasionally cause the model to stop producing coherent sentences altogether, rather than simply declining the request. Push too hard on the wrong feature, and you can destabilise the surrounding language generation.
Sam: So there's a real risk of overcorrection.
Alex: There is. The authors also note that the whole framework depends on having a responsibly trained reference model to begin with. You need a good map before you can do good surgery.
Sam: When you step back, what's the broader significance here?
Alex: The study suggests that when a model learns to handle images, the changes don't spread evenly across the entire system. Instead, visual reasoning concentrates into a compact, identifiable set of internal circuits. That's a meaningful finding — it means these systems are more structured than they might appear, and that structure can be used.
Sam: And if you can identify those circuits reliably, you could potentially monitor them in real time — catching errors before they reach the output.
Alex: That's exactly the direction the authors point toward. Models that can audit and correct their own visual reasoning during inference, rather than waiting for a human to catch the error after the fact. It's a step toward AI systems that are genuinely transparent from the inside.
Sam: A quiet but meaningful shift in how we might think about AI reliability.
Alex: Well put. Thanks for listening to ResearchPod.