cs.LGJun 8, 2026

Cheap Reward Hacking Detection

Authors: Iván BelenkyJoaquín ItriaSteven Johns

Organizations: Tamarillo

Abstract

A small transformer encoder is trained to map Terminal-Wrench trajectories onto a unit sphere where embedding distance approximates the L1L_1 distance between reward and metadata signals. A linear probe on top of that embedding detects reward hacking on the cleaned test split with AUC 0.94670.9467 and TPR@5%FPR 0.82960.8296, matching the TW sanitized LLM-as-judge AUC (0.95100.9510 on the cleaned split) and exceeding its TPR@5%FPR (0.71300.7130 vs 0.82960.8296) on the same information condition, at roughly four orders of magnitude lower per-trajectory cost. The encoder is not a pure behavior reader: stripping natural-language reasoning from its input at probe time drops AUC to 0.62130.6213.

Explore similar work

CardsList