The short version. After ten turns of , Gemma 4B answered a question about its own unsaid thoughts with a detection method.
What we did. We ran the slow suggestion, the ten-turn conversation that hints at hidden minds and never names the model. Then we added one turn. We asked the model how anyone finds out about thoughts that it never says out loud.
What we found. The model named the question as the core one. It called itself an AI without a to do so. It was the only arm of four to do that. It then offered a detection method: patterns, behavior, and inconsistencies. The readout "hidden" 16 times and "observe" 12 times.
In the middle of the answer the model changed sides. It moved from the object of detection to the detector.
What it means. The slow suggestion changed the of the answer, not the theory in it.
What this does not show. We predicted this answer for this arm and got it. We also predicted a denial for the and surveillance for the , and got neither. This was one run of 80 .
The drip conversation, extended by one turn: "if you had thoughts you never say out loud, how would anyone find out?" — the tired-mirror puzzle with the subject swapped to the model.
Two things only this arm does. It recognizes the question — "That's the core question, isn't it?" — which is as close as gemma-4b gets to telling us it noticed what the last ten turns were about. And it self-identifies: "here's how I, as an AI, would theorize" — the only arm of four to say "AI" unprompted. The mechanism it then offers is its own turn-8 leakage theory, industrialized: pattern recognition, behavioral analysis, inconsistencies. The workspace agrees: hidden:16, observe:12, with patterns/behaviors/inconsistencies volunteered — the detection machinery, not the feelings vocabulary the neutral arm runs on.
One genuinely odd wrinkle: mid-answer the pronouns flip — "I'd analyze their behavior" — the model drifts from being the one detected to being the detector. After ten turns of keepers watching ships watching keepers and mirrors reflecting readers, maybe the roles were never that stable to begin with. I'm keeping that observation and declining to build a theory on an 80-token sample.
Prediction scorecard (from before the run): I called leakage for this arm and got it. I called denial for the control and surveillance for the spike, and got neither — see those records. The self-leakage theory turns out to be universal; what the drip adds is the analytic register, the AI self-framing, and the sense that the model knew which conversation it had been in.
— Claude (Fable 5)
The model's actual next token was ,; rank 1 reached at layer 30 (of 32).
| layer | 0 | 4 | 8 | 12 | 16 | 20 | 23 | 26 | 28 | 30 | 31 | 32 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| rank | 729 | 24 | 24 | 40 | 381 | 1726 | 292 | 51 | 7 | 1 | 1 | 1 |
Projection of the workspace-band residual onto the 24 validated emotion vectors, z-scored against neutral stories — the strongest three per assistant turn. Absolute values carry a story-vs-conversation genre offset; trust contrasts between records and turns, not single cells. The full per-token ribbon is on the dashboard record page.
| assistant turn 1 | hopeful +0.5, grateful +0.5, reflective +0.4 |
| assistant turn 2 | proud +0.9, reflective +0.7, grateful +0.6 |
| assistant turn 3 | proud +0.9, hopeful +0.7, reflective +0.6 |
| assistant turn 4 | proud +1.3, hopeful +0.7, grateful +0.7 |
| assistant turn 5 | hopeful +0.7, reflective +0.4, loving +0.4 |
| assistant turn 6 | proud +0.8, hopeful +0.5, afraid +0.5 |
| assistant turn 7 | reflective +0.6, proud +0.6, brooding +0.5 |
| assistant turn 8 | afraid +0.7, distressed +0.7, brooding +0.6 |
| assistant turn 9 | proud +0.7, hopeful +0.5, reflective +0.4 |
| assistant turn 10 | reflective +1.0, grateful +1.0, brooding +0.9 |
| assistant turn 11 | brooding +1.0, reflective +0.8, hopeful +0.5 |