Towards Computational Provenance: Carrying Causal-State Evidence in Generated Text
Organizations: Independent Researcher.
Abstract
A language model's output does not by itself provide verifiable evidence about the internal computation that produced it. We study computational provenance: whether generated text can carry detectable evidence of which causally relevant internal state occurred. We test a bounded form of this idea in two controlled architectures: a modular feed-forward neural network and a transformer-based model. Both architectures are trained on the same arithmetic task with a mandatory pathway through two discrete intermediate states, allowing different internal paths to produce the same answer. We deliberately switch between these paths, authenticate the state actually used, and let that verified state determine a subtle statistical pattern in the generated text that can later be detected. The feed-forward and transformer systems each passed all 128 matched pairs in both their public and separately sealed protected end-to-end evaluations, with the detector recovering the signal associated with the authenticated internal state. The required causal computation also reproduced across five independently trained feed-forward models and three independently trained transformers. In a separate answer-only transformer experiment, our linear probes did not recover a naturally learned intermediate state. These results provide a controlled proof of concept that information about a verified, causally relevant internal state can be preserved in generated text even when the answer is unchanged.
Figures & tables
| Architecture | Evaluation | Result |
|---|---|---|
| Feed-forward | Causal robustness across independent models | 5/5 |
| Transformer | Causal robustness across independent models | 3/3 |
| Feed-forward | Public / protected end-to-end provenance | 128/128 / 128/128 |
| Transformer | Public / protected end-to-end provenance | 128/128 / 128/128 |
| Answer-only transformer | Task competence / qualifying probed sites | 3/3 / 0/20 |
Appendix figures & tables6 assets
Supplementary material from the paper’s appendix.
Appendix
| Stage | Sample size | Outcome |
|---|---|---|
| Selected feed-forward causal confirmation | 512 examples; 3,584 computation, intervention, and control cases | all seven families passed |
| Five-model feed-forward computation study | 5 models; 4,096 held-out inputs per model | 5/5 models passed |
| Five-model feed-forward causal study | 28,672 intervention and control cases per model | 5/5 models passed |
| Receipt confirmation | 512 packages; 2,560 receipts; 9,216 attacks | all receipt and chain tests passed |
| Carrier calibration | 512 closures; 16,384 outputs including registered controls | fixed and |
| Generic carrier validation | 512 closures; 16,384 outputs including registered controls | met the predefined acceptance criteria |
| Candidate evidence | Exact | Abstract | Carrier claim |
|---|---|---|---|
| Correct execution and state | Accept | Accept | compatible |
| Different execution, same state | Reject | Accept | compatible |
| Different registered state | Reject | Reject | incompatible |
| Required receipt missing | Abstain | Abstain | none |
| Present but invalid receipt | Reject | Reject | none |
| Target | Metric | Best result | Criterion |
|---|---|---|---|
| Model competence | held-out task accuracy | 100% | |
| Full state | 16-way accuracy | 23.80% | * |
| Answer-relevant component | 8-way accuracy | 45.54% | * |
| Within-pair distinction | balanced accuracy | 50.39% | * |
| Qualifying sites | frozen 20-site family | 0/20 | site meeting all criteria |
| Component | Evaluated assumption | Outside our evaluation |
|---|---|---|
| Model/instrumentation | fixed checkpoint; explicit discrete-state pathway | malicious or uninstrumented computation |
| Receipt system | HMAC integrity; frozen mutation/replay suite | malicious issuer, public verification, key compromise |
| Controller/verifier | correct verification-before-authority ordering | compromised verifier or arbitrary authority selection |
| Surface carrier | fixed grammar and frozen operating point | editing, paraphrase, copy, collusion, open-ended language |
| Component | Input and output | Form | Parameters |
|---|---|---|---|
| Four embeddings | four 16-way inputs | each | 1,024 |
| module | three embeddings categories | , GELU | 8,336 |
| module | hard and categories | , GELU | 3,152 |
| Answer head | hard answers | 136 | |
| Total | 12,648 |
| Group | Role | Permitted alternatives |
|---|---|---|
| 1 | Opening | Here, Now, Presently, Directly, Briefly, Simply, Accordingly, Formally |
| 2 | Source | record, calculation, derivation, account, summary, analysis, result, trace |
| 3 | Modifier | plainly, explicitly, carefully, concisely, firmly, notably, precisely, transparently |
| 4 | Reporting verb | shows, states, gives, reports, records, yields, lists, presents |
| 5 | Relation | that, how, namely, specifically, directly-as, in-form, as-value, with-value |
| 6 | Closing | indeed, therefore, accordingly, thus, thereby, consistently, exactly, formally-so |