Feature Superposition in Neural Networks: From Theory to Practice
Organizations: University of Cambridge · University of New South Wales · University of Sydney
Abstract
Superposition refers to neural networks representing more features than they have dimensions. It offers a possible explanation for polysemantic neurons and motivates methods for recovering interpretable features from neural activations. Theoretical models typically start with a given set of input features and assumptions about how their values vary across inputs, then study how a network encodes those values in a lower-dimensional hidden representation. Empirical work, by contrast, seeks to identify the features encoded in trained networks and determine their role in computation. In this survey, we review the geometry, learning, and computation of superposed representations, explaining how feature statistics and decoder choice affect the conclusions. To connect these theoretical accounts with evidence from trained networks, we compare practical methods for recovering and analyzing features and examine what their evaluations establish. Since accurate activation reconstruction alone does not establish feature identity or causal use, we discuss the methods' documented failures and applications in light of the evidence available for these different claims. Finally, we assess previously stated open problems and identify remaining theoretical and empirical questions about superposition in trained networks. We hope our work can pave the way for a deeper understanding of superposition and more reliable methods for interpreting neural networks.
Figures & tables
| Symbol | Meaning |
|---|---|
| number of features | |
| feature values and their distribution | |
| ; | activation probability; hard sparsity level ( ) |
| interpretable property of the data inducing feature | |
| hidden width ( ) | |
| linear encoder; column is the direction of feature |
| Quantity | Definition and source | Constrains |
|---|---|---|
| Overcompleteness ratio | Ratio of features to dimensions. | Counts candidate directions; does not by itself specify recovery or information content. |
| Feature capacity ; bound | ; ( Scherlis et al., 2022 ) ; identical to the feature dimensionality of Elhage et al. (2022) ( Section 3.4 ). | Geometric allocation for nonzero columns; does not bound task loss or causal use. |
| Welch bound | ( Welch, 1974 ) . | Worst-case pairwise overlap for unit-norm columns; related total-overlap bounds appear in Section 3.2 . |
| Linear-access width | Least such that one linear map recovers every -sparse to -error : and in the regime of Result 4.1 ( Garg et al., 2026 ) . | The cost of simultaneous uniform linear readout: quadratic in . |
| Sparse-recovery width | suffices with a decoder in and a random or RIP dictionary ( Candès et al., 2006 ; Donoho and Elad, 2003 ) . | Linear in ; the gap to the row above is the decoder class, not a contradiction. |
| Information-theoretic capacity | With coordinate range and resolution : distinguishable messages. | Why finite width alone constrains nothing without a precision model ( Section 3.5 ). |
| Decoder class | Guarantee considered | Conditions and limits |
|---|---|---|
| One linear map, | ( Garg et al., 2026 ) | Uniform approximation on -sparse inputs in . The logarithmic dependence on and is explicit in Result 4.1 ; its lower bound requires fixed , , and sufficiently large . |
| Linear map with pointwise nonlinearity, | Depends on the activation and input law | ReLU improves recovery in Example 2.4 ; that example does not give a width bound for every signed sparse input. |
| Sparse optimization, | ( Candès et al., 2006 ) | Uniform exact recovery under suitable restricted-isometry conditions. Coherence alone gives a more restrictive sufficient certificate. |
| Unrestricted decoder, | Depends on the information retained by the encoder | Admissible patterns mapped to the same observation cannot be distinguished, regardless of decoder complexity. |
| Result | Readout and error model | Sparsity | Width (neurons) |
|---|---|---|---|
| Representation only ( Johnson and Lindenstrauss, 1984 ) | Fixed linear readouts recover sparse feature values to fixed tolerance | ||
| All pairwise ANDs, basis-aligned inputs ( Hänni et al., 2024 ) | One linear readout with uniform error ; single layer | Fixed | |
| All pairwise ANDs, superposed inputs ( Hänni et al., 2024 ) | Same uniform guarantee, with a constructed input encoding | Fixed | |
| Sparse Boolean circuits ( Hänni et al., 2024 ) | Approximation with interleaved correction; all but a negligible fraction of admissible inputs | bounds activity throughout the circuit | for circuit width and polynomial depth |
| Ordered AND instances or permutations, upper bound ( Adler and Shavit, 2024 ) | Exact thresholded recovery; shared input and output codes; constant depth per instance, chainable | ||
| Same families, lower bound ( Adler and Shavit, 2024 ) | Family-level requirement supported by a robust subset; error fraction is measured on the specified set | parameter bits; width follows under fixed-depth, fixed-precision accounting |
| Variant | Change to Equation 11 | Difficulty addressed | Demonstrated effect | Scope |
|---|---|---|---|---|
| ReLU, ( Bricken et al., 2023 ; Cunningham et al., 2024 ) | ; penalty | the original recipe | interpretable latents on real models | its own penalty produces the artifacts below |
| Gated ( Rajamanoharan et al., 2024a ) | separate firing and magnitude paths; on the firing path only | shrinkage: the penalty also rewards scaling magnitudes down | removes aggregate magnitude bias; improves the sparsity-fidelity trade-off in compute-matched comparisons | blinded human interpretability comparison is null; ranking against TopK is protocol-dependent |
| TopK with auxiliary loss ( Gao et al., 2025 ) | keep the largest pre-activations; dead latents fit the residual | dead latents (up to unmitigated); indirect sparsity control | dead at M latents; sparsity set directly | couples latents through an order statistic; dense, principal-component-like solutions as the active count approaches |
| JumpReLU ( Rajamanoharan et al., 2024b ; Lieberum et al., 2024 ) | per-latent learned threshold; direct objective via straight-through estimators | thresholding without batch coupling | basis of the open Gemma Scope suite; a weight-tied Gated encoder has this form with bias-determined thresholds and per-latent rescaling | the release itself reports no ground-truth or causal validation |
| BatchTopK; Matryoshka ( Bussmann et al., 2024 ; Bussmann et al., 2025 ) | batch-level threshold; nested dictionary prefixes, each reconstructing alone | absorption, splitting, composition | reduces first-letter absorption at matched sparsity; avoids worsening absorption with width in the SAEBench comparison | the nesting is a researcher-imposed hierarchy prior; no differentiation on board-game models with known ground truth |
| End-to-end ( Braun et al., 2024 ) | reconstruction replaced by KL divergence of spliced outputs, optionally plus downstream-activation error | reconstruction rewards variance the model never uses | reduces loss increase at matched and allocates fewer latents to a high-variance direction whose resample ablation after the first token barely changes output | the pure variant is seed-unstable and routes computation differently; latent magnitudes shrink |
| Supervised probes and dictionaries | Unsupervised dictionaries | Functional replacement | Parameter decomposition | |
|---|---|---|---|---|
| Question answered | is this named variable accessible, at which decoder class? | what overcomplete coordinate system makes activations sparse? | can an interpretable surrogate substitute for the computation? | which parameter components participate in different computations? |
| Recovered object | one direction (or offset set) per named variable | dictionary of directions with sparse latents | surrogate sublayer maps; attribution graphs with error nodes | sparsely used parameter components, built from rank-one subcomponents |
| Evidence sought | accessibility (L2); causal use (L5) tested separately on templatic tasks | identification (L3), conditional on a recovery reference or the assumptions of Section 4.5 | substitutability (L4); mechanistic interpretation (L6) requires further tests | mechanistic components (L6 target); evaluations in toy settings and one -parameter model |
| Characteristic artifacts | the ontology is supplied in advance; dataset idiosyncrasies read as features | shrinkage, dead latents, absorption, splitting, seed instability ( Section 9 ) | error nodes carry causal weight; attention routing outside the account; conclusions surrogate-relative | unaudited by third parties; interference-separation untested |
| Reported cost | one supervised fit per variable | hours on small models; a full open suite consumed over of GPT-3’s training compute ( Lieberum et al., 2024 ) | surrogate training for the replaced sublayers; graph computation per prompt; cost depends on the replacement recipe | reported only for models up to parameters |
| Sources | Gurnee et al. (2023) ; Makelov et al. (2025) | Cunningham et al. (2024) ; Gao et al. (2025) ; Bussmann et al. (2025) ; Braun et al. (2024) | Dunefsky et al. (2024) ; Marks et al. (2025) ; Ameisen et al. (2025) | Braun et al. (2025) ; Bushnaq et al. (2025) ; Bushnaq et al. (2026) |
| Metric | What it measures | What it does not measure | Documented disagreement |
|---|---|---|---|
| Reconstruction error; explained variance | share of activation variance the dictionary returns | whether the returned directions carry the model’s behavior | most discriminative metric in the audit, yet against latents on a direction that is functionally inert away from the first position ( Braun et al., 2024 ; Chanin, 2026 ) |
| mean active latents per token | whether that level matches the data’s sparsity | mixing at too low and degenerate solutions at too high ( Chanin and Garriga-Alonso, 2026a ) ; decoder-geometry and firing-time ground-truth scores peak at different ( Chanin, 2026 ) | |
| Loss recovered; KL of spliced outputs | behavior preserved when the reconstruction replaces the activation | which part of the behavior the residual carries | zero-ablation and mean-ablation normalizations are not comparable ( Karvonen et al., 2025 ; Makelov et al., 2025 ) |
| Automated interpretability | whether a language model predicts a latent’s firing from its description | whether the description names a unit the model uses | for a frozen-random dictionary against for a trained one ( Korznikov et al., 2026 ) ; signal-to-noise ratio , limiting reliable selection from a single checkpoint ( Chanin, 2026 ) |
| Sparse probing, SAEBench default | whether a named concept is readable from a few latents | whether the model uses the concept | saturated at the canonical setting, accuracy above while matched cosine spans to ; signal-to-noise ratio at top-1, about two-thirds that of the sae-probes variant ( Chanin, 2026 ) ; top-1 near parity with frozen-random dictionaries ( Korznikov et al., 2026 ) |
| Sparse probing, sae-probes variant | the same, over datasets with cross-validated probe regularization | whether the model uses the concept | most reliable metric audited, at signal-to-noise ratio to against for automated interpretability ( Chanin, 2026 ) |
| Source | Model | Sense | Reported quantity |
|---|---|---|---|
| Scaling report ( Templeton et al., 2024 ) | Claude 3 Sonnet, middle-layer residual stream | activation variance | at least of activation variance explained, at each of the three dictionary widths; institutional report |
| Engels et al. (2025b) | Gemma 2 9B, layer 20, open dictionary suite | activation variance | fraction of variance unexplained fitted as in dictionary width , with the asymptote extrapolated beyond the widths measured; refereed |
| Circuit-tracing report ( Ameisen et al., 2025 ) | 18-layer model, M-latent cross-layer transcoder | attribution-graph paths | replacement score on unpruned graphs, against for per-layer transcoders of the same size, so of the weighted path influence runs through the residual; institutional report |
| Case-study report ( Lindsey et al., 2025b ) | Claude 3.5 Haiku | prompts yielding a satisfying explanation | attribution graphs give satisfying insight on about a quarter of the prompts tried, which the authors state as their own judgment and call difficult to quantify precisely; institutional report |
| Activity | Setting | Reported cost |
|---|---|---|
| Training an open dictionary suite | more than JumpReLU dictionaries over all layers of Gemma 2 2B and 9B plus selected layers of 27B | over of GPT-3’s training compute ( Lieberum et al., 2024 ) |
| Training one dictionary | Gemma-2-2B residual stream, one site | M tokens per dictionary in both protocols ( Korznikov et al., 2026 ; Karvonen et al., 2025 ) |
| Training one dictionary, model organism | chess or Othello, M tokens | under hours on one A100; over dictionaries released ( Karvonen et al., 2024 ) |
| Evaluating one dictionary | eight-metric suite, k latents | about minutes per dictionary plus minutes of one-time setup on one RTX 3090 ( Karvonen et al., 2025 ) |
| Evaluating one dictionary, model organism | coverage and board reconstruction | under minutes ( Karvonen et al., 2024 ) |
| Auditing the benchmark | snapshot panels, three seeds, plus a synthetic validity panel | roughly to H100-hours of evaluation and about H100-hours of dictionary training ( Chanin, 2026 ) |
| Presupposition ( Section 6.5 ) | Failure when it does not hold | Evidence | Documented in |
|---|---|---|---|
| Features are linear directions ( Definition 2.3 ) | a concept carried by a curved function of the activations has no direction to recover | the surveyed circular subspaces of Engels et al. (2025a) are linear; these examples do not establish a failure of linear subspace representation | Section 9.5 |
| Atoms are one-dimensional | a group of atoms tiles the feature instead of spanning it | two-dimensional circular day, month, and year subspaces ( Engels et al., 2025a ) ; a counting task in which the model manipulates a curved low-dimensional manifold, reported by Gurnee et al. (2026a) ; five architectures on Llama-3.1-8B plateau far beyond each manifold’s ambient dimension ( Bhalla et al., 2026 ) | Section 9.5 |
| Coefficients are sparse | a sparse dictionary can leave dense structure in its residual | the residual is modeled as unlearned features, a dense term, and a term the autoencoder introduces ( Engels et al., 2025b ) ; the width scaling of reconstruction error needs a constant term ( Gao et al., 2025 ) ; separately, removing residual-stream error nodes severely disrupts a circuit model, without isolating the dense component ( Marks et al., 2025 ) | Section 9.4 |
| Atoms are layer-local | a per-layer dictionary decomposes a projection of an object that is not layer-local | The crosscoder report finds latents whose decoder norm is substantial across most layers, and states that this is consistent with cross-layer superposition without establishing it ( Lindsey et al., 2024 ) | Section 7.5 |
| The dictionary is identifiable | absorption, splitting, hedging, and seed-dependent atoms | Result 9.1 ; over-splitting preferred with two true features ( Makelov et al., 2025 ) ; stitching and meta-SAEs ( Leask et al., 2025 ) | Sections 9.1 and 9.2 |
| Domain and architecture | Object decomposed | Reported finding | Status |
|---|---|---|---|
| Vision and image generation (InceptionV1, DINOv3, SDXL) | activations, block-sparse featurizers | concepts recovered as low-dimensional blocks rather than single directions, selected by a description-length comparison against dictionaries of directions; generation steered within a block ( Fel et al., 2026 ) | preprint |
| Diffusion image models (SD 1.5, SDXL Turbo) | activations, autoencoder latents | latents detect and localize the target concept; multiplier interventions push activations off distribution and produce artifacts in to of images ( Cassano et al., 2026 ) | preprint |
| EEG transformers (SleepFM, REVE, LaBraM) | embeddings, TopK autoencoder | three steering regimes separated by a target-versus-off-target probe statistic; interventions that collapse global performance; age and pathology inseparable ( Lehn-Schiøler et al., 2026 ) | preprint |
| Single-cell foundation models (Geneformer V2-316M, scGPT) | residual stream, all layers | and latents, invisible to a singular-value decomposition; to annotate to biological databases; of transcription factors show target-specific responses under CRISPRi ( Kendiukhov, 2026 ) | preprint |
| Continuum-dynamics emulator (Walrus) | one layer, over latents | feature recruitment recurs across shear-flow setups only piecewise, is intermittent, and does not map onto standard physical decompositions ( Rosenfeld and Sonnewald, 2026 ) | workshop |
| Time-series forecasting transformer (PatchTST) | post-GELU feed-forward activations | widening the dictionary changes performance by on average; interventions on dominant latents barely move the forecast; the author concludes superposition is not necessary here ( Yıldırım, 2026 ) | preprint |
| Question | Posed in | Verdict | Evidence and Remaining Scope |
|---|---|---|---|
| How many latents should a dictionary have? | 2022 report | unique width unestablished | The studies leave dictionary width without a uniquely supported choice. Latents fitted at one width decompose into latents fitted at another ( Leask et al., 2025 ) ( Section 9.2 ). |
| Does dictionary learning on real activations return the model’s own directions? | 2022 report | answered negatively | Recovery varies with the generator, matching rule, and threshold rather than consistently returning the stipulated directions: of directions at explained variance under one generator and matching rule, against almost complete recovery under another ( Korznikov et al., 2026 ) ( Section 8.1 ); chess coverage against for probes on the same activations ( Karvonen et al., 2024 ) ( Section 8.2 ). |
| Are the recovered atoms the model’s features or mixtures of them? | 2025 agenda | mixtures can occur | The analyzed optima can favor mixtures, with reconstruction succeeding while recovery fails outside the stated extreme-sparsity conditions ( Cui et al., 2025 ; Tang et al., 2026 ) ( Section 4.5 ). |
| Is the sparsity objective the right training signal for recovery? | 2025 agenda | answered negatively | The objective also favors artifacts. Absorption follows from the penalty ( Result 9.1 ), and splitting appears with no multi-scale structure present ( Makelov et al., 2025 ) ( Section 9.1 ). |
| Has a latent’s label been shown to be a property of the model? | 2025 agenda | answered negatively | Confident descriptions attach to of random directions against of real coordinates ( Bolukbasi et al., 2021 ) , and a frozen random decoder matches trained dictionaries on automated interpretability ( Korznikov et al., 2026 ) ( Section 9.3 ). |
| Is there a test certifying from activations alone that a layer holds more features than dimensions? | 2022 report | reformulated | A recovery-qualified verdict depends on the feature list, tolerance, and decoder class ( Definition 2.1 , Example 2.4 ); the packing degree at a specified layer tests whether the stated feature list contains more recoverable features than that layer has dimensions ( Definition 2.5 ). |