Fair outputs, Biased Internals: Causal Potency and Asymmetry of Latent Bias in LLMs for High-Stakes Decisions

Jagdish Tripathy, Marcus Buckmann

arXiv:2605.15217 · 2026-05-18 공개 · arXiv · PDF

adversarial-prompts llms activation-steering fairness demographic-representations output-bias mortgage-underwriting latent-bias

Abstract

Instruction-tuned language models exhibit behavioural fairness in high-stakes decisions while retaining biased associations in their internal representations. However, whether these suppressed representations can affect model outputs - and whether such causal potency is symmetric across demographic groups - remains unknown. We investigate the use of open-weight models for mortgage underwriting using matched applications that differ only in racially-associated names and reveal a critical disconnect: models show no output-level bias, yet retain and amplify demographic representations across model layers. Through activation steering and novel cross-layer interventions, we demonstrate that this suppressed information is decision-relevant: when reinjected at critical layers, it produces near-complete decision reversals. Critically, this latent bias is asymmetric - steering interventions affect decisions in one demographic direction, while producing minimal effects in reverse - and susceptible to adversarial prompt engineering and parameter-efficient fine-tuning. These findings demonstrate that behavioural audits focused on outputs are insufficient: fair outputs can mask exploitable internal biases. They also motivate dual-layer testing frameworks combining output evaluation with representational analysis for AI governance in high-stakes decisions.

한국어 요약

📋 한 줄 요약

**[AI 공정성 / 해석가능성]** instruction-tuned LLM이 출력은 공정해 보여도 내부 표현에는 편향이 잠재해 있으며, 그 편향이 비대칭적으로 의사결정을 뒤집을 수 있음을 모기지 심사 사례로 실증.

🎯 핵심 기여도

💡 핵심 아이디어

behavioural audit이 출력에서 공정함을 보장하더라도, 내부 표현에 남은 demographic 정보는 비대칭적 인과력으로 작동할 수 있다. 진정한 AI 거버넌스는 출력 평가와 표현 분석을 결합한 dual-layer testing을 필요로 한다.

🔬 기술적 접근법

📊 주요 결과

💭 의의 및 한계

**의의**: 출력 기반 공정성 감사의 근본적 불충분함을 인과적으로 입증, 고위험 의사결정에서의 dual-layer testing 프레임워크 정당성 확보. **한계**: 한 도메인(모기지 심사)·특정 open-weight 모델군에 기반, 다른 고위험 도메인·closed-weight 모델로의 일반화는 추가 검증 필요.

🚀 실용적 활용