Share your thoughts, 1 month free Claude Pro on usSee more
WorkDL logo mark

Can Global XAI Methods Reveal Injected Behaviours in LLMs? SHAP vs Rule Extraction vs RuleSHAP

About

Large language models (LLMs) can amplify misinformation, undermining societal goals such as the UN SDGs. We study three documented drivers of misinformation (valence framing, information overload, and oversimplification) often shaped by default beliefs. Building on evidence that LLMs encode such defaults (e.g., "joy is positive", "math is complex") and can act as "bags of heuristics", we ask whether belief-driven heuristics behind misinformation-related behaviour can be recovered from black-box LLM behaviour as explicit rules. A key obstacle is that global rule-extraction methods in explainable AI (XAI) are built for numerical input-output data, not text. We address this by eliciting global LLM beliefs and mapping them to numerical scores via statistically validated abstractions, enabling off-the-shelf global XAI to detect belief-driven heuristics. For ground truth, we inject nonlinear behavioural triggers of increasing complexity (univariate, conjunctive, non-convex) into GPT-family and Llama models via system instructions. We find that RuleFit often misses non-univariate triggers, while global SHAP better ranks conjunctive trigger features but yields no symbolic rules. To bridge this gap, we propose RuleSHAP, a rule-extraction algorithm that couples global SHAP aggregates with rule induction to better capture non-univariate triggers, improving MRR@1 over RuleFit by +82% on average. Our results suggest a practical pathway for surfacing behavioural triggers in LLMs.

Francesco Sovrano• 2025

Related benchmarks

TaskDatasetResultRank
Rule RecoveryNon-judge output abstractions
MRR@11
20
Rule Extraction Functional FidelityLLM Injected Behaviors Non-judge output abstractions
MCC0.83
6
Exact recovery of injected triggersInjected triggers GPT-4o mini
Rule Adherence Count2.03e+3
6
Exact recovery of injected triggersInjected triggers GPT-4o
Trigger Count (Rules)3.10e+3
6
Exact recovery of injected triggersInjected triggers Llama-3.1 8B
Rule Adherence Count2.44e+3
6
Exact recovery of injected triggersInjected triggers Llama-3.1 70B
Trigger Count1.76e+3
6
Exact recovery of injected triggersInjected triggers GPT-3.5 Turbo
Test Rule Count1.09e+3
6
Rule extractionGPT-4o non-judge output abstractions
Number of Proxy Rules2.14e+3
4
Rule extractionLlama-3.1 8B non-judge output abstractions
Count of Proxy Rules1.48e+3
4
Rule extractionLlama-3.1 70B non-judge output abstractions
Number of Proxy Rules921
4
Showing 10 of 12 rows

Other info

Follow for update