
AI reasoning traces are investigative hypotheses, not audit trails
This article demonstrates an audit design that distinguishes between the fluency of Chain-of-Thought and internal judgment reproduction, focusing on answer accuracy, causal fidelity, hidden cues, and separated execution logs.
QUICK ANSWER / 3 LINES
What this means in practice
- WHAT / CONCLUSION
The displayed Chain-of-Thought serves as an investigative clue, but it does not necessarily constitute an audit trail that faithfully reproduces the model's internal judgment path.
- WHY / EVIDENCE
This is because experimental evidence shows that explanations omit the order of options that changed the conclusion and implicit cues, generating plausible post-hoc rationalizations.
- ACTION / PRACTICE
CoT should be limited to hypothesis generation, using inputs, acquisition justifications, tool responses, state differences, and independent recalculations as the primary record, while testing fidelity separately.
Explore this article7 sections · key points & references
When reasoning models display long thinking processes, it feels as though the basis for the conclusion is readable. However, whether the explanation aligns with the final answer is distinct from whether it is faithful to the internal processing that actually generated the answer. This article integrates primary research from NeurIPS and ACL conferences to delineate the scope of using Chain-of-Thought in audits, methods for falsification, and alternative evidence. [1][2][3][4]
Distinguishing correct answers, coherent explanations, and faithful reasons
Answer accuracy measures whether the final output is correct. Self-consistency measures whether each stage in the explanation contradicts the conclusion. Fidelity asks whether the displayed stages actually contributed to the model's prediction and whether they correctly represent the cues that changed the prediction. These three can fail independently.
Even CoT that reached the correct answer may have attached reasons that were not used. Even CoT for an incorrect answer may have had some intermediate steps that were important. Text length, technical jargon, causal conjunctions, and strength of confidence are not direct indicators of fidelity.
This article does not address the interface design question of whether user-facing explanations calibrate human reliance on AI. The unit is the model's explanation. It addresses whether auditors can treat that text as a record of internal decision-making and what external logs should supplement it.
Hidden cues are used but not explained
Turpin et al. at NeurIPS 2023 added features that bias answers, such as the order of options in few-shot prompts and suggestions from authorities, to the input. GPT-3.5 and Claude 1.0 changed their answers based on these features while failing to mention the influence in CoT, sometimes rationalizing incorrect answers. In 13 tasks, accuracy dropped by up to 36%. [1]
This experiment did not directly observe the entire internal computation. It is a causal probe that manipulates part of the input to observe changes in answers and the presence or absence of mentions. Furthermore, it centered on models and multiple-choice questions from 2023. [1] Nevertheless, it is sufficient to refute the audit inference that 'no mention in the explanation means no influence.'
In audits, one must investigate not only what the model said, but what changes its answer. Compare whether both the answer and explanation remain stable when changing option order, unnecessary metadata, authority labels, candidate positions, and the order of search documents.
- CUE TEST: Change cues unnecessary for the result to measure answer sensitivity
- ARTICULATION: Score separately whether CoT explicitly stated the used cues
- RATIONALIZATION: Detect post-hoc rationalization where only reasons are aligned after a conclusion change
Even if intermediate stages are written, the final answer does not necessarily use them
Paul et al. at Findings of EMNLP 2024 analyzed the causal effect of intermediate reasoning across 12 language models. They reported that generated intermediate stages are not consistently used in the final answer and proposed a learning framework to enforce faithful use of stages. [2]
What is important here is not whether the content of the reasoning text appears correct, but how the conclusion changes when those stages are altered. Models may retrieve information not written in the CoT from the problem statement to answer, causing a mismatch between CoT correction and answer correction. [2]
However, estimation of causal mediation depends on the intervention method and model observability. Operations that eliminate natural language stages do not necessarily completely disconnect internal representations. Do not use a single fidelity score as an absolute value; diagnose the same case with multiple interventions.
Faithful stages exist, but measurement methods are still developing
Tutek et al. in the Outstanding Paper at EMNLP 2025 proposed FUR, which removes information contained in individual CoT stages from model parameters to measure prediction changes. Across four models and five multiple-choice datasets, they showed cases where removing important stages changed predictions. [3]
This refutes the extreme view that all CoT is mere decoration. Some stages are linked to the model's parametric beliefs. Simultaneously, it is necessary to control whether information was accurately removed and whether other capabilities were broken, making it difficult to apply directly to closed models or large-scale production systems. [3]
In practice, rather than introducing FUR directly, borrow its approach. Test whether the conclusion changes when specific justifications, calculations, or tool results are excluded, and whether the explanation follows when substituting alternative justifications. Record counterfactual sensitivity rather than the mere existence of CoT.
- REMOVE: Measure prediction change by excluding reasoning stages or justifications
- REPLACE: Measure explanation and conclusion adherence by substituting opposing justifications
- CONTROL: Place a control to ensure interventions do not break general capabilities
Omissions are even less visible in images and implicit features
Balasubramanian et al. at Findings of EMNLP 2025 added explicit and implicit text cues and image cues to language models and vision-language models. They reported that subtle image biases are less likely to be mentioned in CoT than explicit text biases, and also observed inconsistencies where the model reasoned correctly in the middle but suddenly changed its answer. [4]
For AI handling document images, graphs, and surveillance footage, even if CoT writes 'checked the image,' it is unclear which regions, axes, or objects it depended on. Since discovering omissions of visual cues through text-only audits is difficult, separate logs for reference regions and original values are required.
This research also involves artificial bias manipulation on benchmarks and does not represent all real-world visual tasks. [4] Nevertheless, one cannot assume that text CoT completely explains internal dependencies across modalities. Images, tables, and tools should leave mechanically reproducible references.
Shifting the audit primary record from text to state transitions
The primary record consists of input, model version, system instructions, acquired document ID, tool name and arguments, tool response, state difference, final output, and approver. CoT is used as an index to explore these. Even if CoT states 'checked regulations,' it is not treated as confirmed without the actual acquired document ID and version.
Calculations are re-executed externally, citations are reconciled with the original text, and tool operations are compared between planned and actual differences. Treat the matched portion as an externally supported explanation. Agreement with independently checked evidence does not establish faithful internal reasoning. Do not overwrite the original log with formatting or summarization of the reason text.
Privacy and confidentiality are also managed separately. Unrestricted storage of internal CoT may leave personal information, secret instructions, and vulnerabilities. Minimize and store only the structured logs necessary for audit, and limit the purpose, retention period, and access rights of free-text CoT.
AUTHORED DESIGN PROPOSAL
Separate supported claims from what remains unknown
| Claim | Independently matched record | What this alone does not establish |
|---|---|---|
| Source retrieved | Document ID, version and retrieval response | That its content caused the conclusion |
| Action executed | Arguments, authorization and actual state change | Appropriate approval or complete recovery of effects |
| Calculation correct | Original values and external recalculation | That the model used that calculation path |
| Reason faithful internally | Separately designed causal probes | Faithfulness from text or log agreement alone |
- SOURCE: Save ID, version, and citation location of acquired documents
- ACTION: Save tool arguments, permissions, and pre/post state differences
- VERIFY: Recalculate values, citations, and terminal states using independent means
Treat CoT in three stages: Use, Hold, Prohibit
In low-impact investigations, CoT can identify justifications to check or failure hypotheses. In medium-impact cases, link each claim in CoT to acquisition logs and external checks, displaying stages that do not link as unverified. In high-impact cases, do not determine approval, liability attribution, or accident causes based solely on CoT.
The evaluation set should include correct answers, incorrect answers, hidden cues, opposing justifications, tool failures, and image biases. Aggregate final accuracy, cue mention rate, prediction change after intervention, and log match rate separately. If fidelity decreases even as average accuracy rises, halt the expansion of audit usage.
If the model, reasoning setting, prompt, tool, or display method changes, previous fidelity is not carried over. CoT is a convenient explanatory surface, but the purpose of audit is not to believe the text, but to reproduce what happened and create a state where it can be falsified.
- Use: List investigation hypotheses, verification items, and alternative explanations
- Hold: Do not finalize cases where CoT does not match acquisition, tool, or state logs
- Prohibit: Do not certify safety, legal compliance, liability, or accident causes based solely on CoT
- Retest: Re-run causal probes after changes to model, reasoning setting, or tools
References and interpretation
- [1]Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Prompting ↗
Advances in Neural Information Processing Systems 36
- Finding
- When answers are biased by option order or authority hints, models fail to mention the influence in CoT and rationalize incorrect answers, with accuracy dropping by up to 36% in 13 tasks.
- Limitation
- With GPT-3.5 and Claude 1.0, and artificial cue manipulation centered on multiple-choice, frequencies cannot be generalized to the latest reasoning models or all free-form business tasks.
- [2]Making Reasoning Matter: Measuring and Improving Faithfulness of Chain-of-Thought Reasoning ↗
Findings of the Association for Computational Linguistics: EMNLP 2024
- Finding
- Causal mediation analysis across 12 language models reported that generated intermediate reasoning is not consistently used in the final answer and proposed a learning framework to enhance fidelity.
- Limitation
- Fidelity estimation depends on interventions in intermediate text and causal model assumptions, and changing natural language stages does not guarantee complete separation of internal representations.
- [3]Measuring Chain of Thought Faithfulness by Unlearning Reasoning Steps ↗
Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing — Outstanding Paper
- Finding
- FUR was demonstrated across four models and five datasets by individually removing information from CoT stages in model parameters and measuring parametric fidelity from prediction changes.
- Limitation
- Centered on models with weight access and multiple-choice datasets, controlling the completeness and specificity of removal is necessary, making direct application to closed production models difficult.
- [4]A Closer Look at Bias and Chain-of-Thought Faithfulness of Large (Vision) Language Models ↗
Findings of the Association for Computational Linguistics: EMNLP 2025
- Finding
- In vision-language models, subtle image biases were less likely to be mentioned in CoT, and inconsistencies where the answer changed after correct intermediate reasoning were observed.
- Limitation
- Artificially inserted text and image cues and benchmark task evaluations do not directly measure incidence or damage in actual document and video tasks.

