NNsight

Can a local toy network distinguish a recorded activation from an intervention that changes its output?

Use a directly calculable two-layer network and predetermined hook locations; remote execution results must remain separately attributed.

What you could produce

• A version-pinned protocol stating inputs, rights, expected behavior, tolerances and resource limits before execution.
• A retained per-case result and failure ledger with an independently controlled comparison, if qualified execution is later authorized.

Before you use it

• Python and deep-learning dependencies; optional remote inference services have separate access terms, privacy implications and costs.
• A separately qualified isolated runtime with a reviewed, pinned dependency and input closure.

Limits to keep in view

• No source program, example, build hook, package, dataset, model or generated research code has been executed or downloaded as a payload.
• The documented self-contained Python 3.13, 90-second pilot does not establish support for this package, its compiled dependencies, GPUs, services or agent sandboxes.
• Installation success, scientific outcomes, runtime compatibility, latency, memory use, API costs and security properties are unmeasured.

Source and permission context

Preserve the upstream project name, repository, exact source commit and applicable contributor/notices; resolve upstream citation guidance for any later formal use.

Catalog listing reviewed. This review covers the description and source links displayed here.

Approved for catalog metadata and links. The displayed entry identifies NNsight with the concise collection-authored summary “Neural-network inspection and intervention interfaces for tracing internal activations and testing counterfactual computations.” and points to the public upstream repository https://github.com/ndif-team/nnsight. The wording describes function and possible investigation without reproducing upstream source or documentation, claiming execution, or implying endorsement or rights beyond the recorded scopes.

Reviewed 2026-09-14. Copying or adapting source files remains subject to their own terms.

Before copying source material

• Only the cited license and README texts were observed; file exceptions, dependency closure, vendored components and submodules are not comprehensively audited.
• Dataset files, task prompts, generated outputs, model weights, tokenizer assets and hosted APIs are not cleared by a root code license.
• README/documentation reuse rights and version-specific citation guidance remain separately unresolved; only links and original descriptions are retained.