Home · Writing · Consciousness

Building an Attention Schema Without Mistaking Report for Experience

A build and experiment specification for agents that model their own attention, use the model for control and report it, without turning functional evidence into a claim about experience.

TLDR

  1. A build and experiment specification for agents that model their own attention, use the model for control and report it, without turning functional evidence into a claim about experience.
  2. At 02:13, an orbital inspection agent called Aster is following a hairline thermal fault across a field of solar panels.
  3. This paper specifies an artificial attention-schema experiment. It does not present results from Aster, which is a worked design, and it does not use awareness-like language as evidence of phenomenal awareness.
  4. Let A[t] be the instrumented allocation state, Z[t] the compressed schema, U[t] the controller’s allocation action and R[t] the report.
  5. Imagine two systems riding inside the same rover. The mute navigator controls a steerable camera.
One allocation casts a controllable internal shadow A dark orbital field contains a bright teal attention trajectory around a coral target. A smaller lavender orbit represents the attention schema, while a white report ribbon leaves the schema and a dotted control arc returns to the allocation. A displaced ghost orbit illustrates an incorrect schema. Physical allocationCompressed schemaReportControlFalse internal shadow Modelling attention can change attention without settling experience
Figure 1. The schema is not the allocation itself. It is a smaller, fallible internal model that can guide control and feed a report. Its causal usefulness is testable; its phenomenal interpretation is not built into the diagram.
On this page

At 02:13, an orbital inspection agent called Aster is following a hairline thermal fault across a field of solar panels. Its wide camera sees all 24 panels at low resolution. A steerable sensor can inspect only one patch at high resolution, and the compute budget permits one expensive diagnostic at a time. The agent’s allocation process is physically real in the engineering sense: gain, sensor direction and inference budget are concentrated on panel 7.

Inside Aster is a smaller model that says where this allocation is, how stable it is and what may capture it next. Call that model the attention schema. During a hidden test, the evaluator leaves the sensor on panel 7 but changes the schema to panel 14. Aster says, “My attention is on panel 14.” One second later, its controller rotates the sensor toward panel 14, misses the fault on panel 7 and spends its diagnostic budget on an intact connector.

What did the experiment show?

It showed more than a scripted sentence. The altered schema changed both report and control while the original allocation and visible scene were held fixed. Yet it showed less than consciousness. A compact internal variable caused an awareness-like report and redirected a scarce resource. Whether anything was experienced remains a further question.

The decisive move is to separate the model, the control benefit, the report path and the experience claim before building the system. Once those four are fused under the word “awareness”, an impressive demonstration becomes almost impossible to interpret.

This paper specifies an artificial attention-schema experiment. It does not present results from Aster, which is a worked design, and it does not use awareness-like language as evidence of phenomenal awareness.

Part I. Build the shadow, not another dashboard

Attention schema theory begins with a control problem. Attention allocates limited processing to some signals at the expense of others. A controller that must steer this changing allocation benefits from a simplified model of it, just as movement benefits from a body schema. On the theory’s stronger reading, the brain’s schematic description of attention is what it reports as subjective awareness.

That last step is a theoretical identity claim. The engineering insight can be tested without granting the identity. Build a model of allocation. Show that the model predicts the allocation under hidden changes. Show that the controller uses it. Then ask what the system can report through a channel that actually receives the model. The experiment remains useful whether one accepts attention schema theory, functionalism, phenomenology or a consciousness-primary ontology.

The word “attention” needs a fixed referent here. It does not mean a transformer’s query-key-value operation in general. Aster has an explicit allocation process with scarcity and consequence: high-resolution sensing, diagnostic compute and action time are selectively assigned. Transformer attention may participate inside the policy, but its matrices are neither the operational allocation nor automatically a schema of that allocation.

Object Operational meaning in Aster Directly measurable? Common category error
Allocation state Sensor locus, gain, compute share and active diagnostic Yes, through the instrumented controller Calling every attention weight the agent’s attention
Attention schema Compressed estimate of allocation, stability, causes and next control options Yes, if separately represented and intervenable Treating a telemetry copy as a model used by the agent
Report A generated claim conditioned on schema and task context Yes, as behaviour Treating first-person grammar as privileged access
Experience Whether there is something it is like for the system Not directly through this experiment Treating functional success as phenomenal proof

What the schema must compress

A useful schema cannot contain a full copy of every hidden activation. A copy would recreate the control problem at the same scale. The schema earns its name by discarding detail while preserving variables that matter for prediction and action.

For Aster, the minimum candidate contains five fields: the current allocation target, the allocation’s concentration, its expected persistence, the cause of the latest shift and the controller’s confidence in the estimate. A sixth field, predicted capture, identifies which event is most likely to displace the allocation next. None is inherently linguistic. A compact vector, a small recurrent state or a discrete belief distribution may do the job.

The omission pattern matters as much as the field list. The schema need not encode every pixel, every attention head or the exact arithmetic that created the allocation. A body schema guides a hand without modelling every motor neuron. Likewise, an attention schema may represent “high-resolution inspection is narrow, stable and vulnerable to the flashing fault cue” without storing the mechanism that implements sensor gain.

A schema is a lossy lens over the allocation field A turbulent multicolour field of sensor, compute, goal and interruption signals enters a six-bladed iris. The iris emits a compact lavender ribbon with labelled properties: target, concentration, stability, cause, confidence and predicted capture. Grey discarded traces fall below the lens. sensor fieldgoal pressurecompute loadinterruptions targetconcentrationstabilitycauseconfidencepredicted capture Discarded mechanism detail · preserved control structure
Figure 2. Compression is a feature, not a defect. The research question is whether the reduced state preserves the distinctions needed to predict and control allocation under conditions the policy has not memorised.

The 2021 neural-network agent study supplies an important proof of concept. A deep reinforcement-learning agent moved a visual spotlight to track a falling ball and catch it. Its schema was a simple 10 by 10 array showing the spotlight location. Disabling the schema impaired attention control and task performance; training without it produced much poorer learning. This establishes a functional benefit in a deliberately simple setting. It does not establish experience, and the supplied descriptive array was far less demanding than a schema that must emerge and generalise.

A later reinforcement-learning study allowed an additional resource to develop without explicitly hard-wiring a schema. At intermediate visual noise, where the attention window was hard to infer from the stimulus alone, the resource came to carry information about the window and its removal sharply reduced reward. The result suggests a useful principle: a schema becomes valuable when the state of attention matters and cannot be read cheaply from ordinary input. If allocation is already obvious from the scene or policy, an auxiliary state can be decorative.

Formal depth: the four-variable contract

Let A[t] be the instrumented allocation state, Z[t] the compressed schema, U[t] the controller’s allocation action and R[t] the report. The environment and task history are H[t].

Four relations define the experiment. Schema fidelity asks whether Z[t] predicts hidden A[t] beyond H[t]. Control reliance asks whether intervening on Z[t] changes U[t] while A[t] and H[t] are fixed. Control value asks whether access to a truthful Z[t] improves return under uncertainty compared with capacity-matched controls. Report access asks whether R[t] distinguishes interventions on Z[t] better than an observer restricted to H[t] and visible output.

No one relation substitutes for another. High decodability can coexist with zero policy use. A lesion can hurt because it removes parameters rather than a schema. A report can correlate with hidden state because the state changed the visible output. The contract therefore requires matched capacity, sham interventions, impact-matched perturbations and an output-only observer.

Part II. Four agents that can produce the same sentence

Suppose all four Aster variants sometimes say, “I am attending the damaged panel.” Surface agreement is the start of the experiment, not its result.

The full-schema agent has an allocation process, a compact model of it, a controller that can use the model and a report channel that can read it. The silent-schema agent has the same model and control path, but the report path is cut. The report-only mimic receives prompts, scene summaries and prior outputs but no schema. The no-schema controller allocates sensors and compute directly from the observation and goal state.

Capacity matching is essential. Removing a schema also removes parameters and a learning objective. A fair control receives a same-sized auxiliary module trained on a task that does not model attention. The comparison asks whether attention-specific structure matters, not whether a larger network wins.

Four agents can wear the same verbal mask Four stylised face profiles emit the same speech ribbon. The full-schema profile contains a teal allocation eye, lavender inner crescent and two open paths. The silent schema has a cut report path. The report mimic has a speech path but no inner crescent. The no-schema controller has an allocation eye and direct control path only. Full schemaSilent schemaReport mimicNo schema “I am attending the damaged panel.”Identical words · different causal histories
Figure 3. A report is evidence about the path that produced it only when competing paths are present in the evaluation. Fluency cannot reveal whether a schema existed, guided control or supplied information unavailable in the visible context.
Variant Allocation Schema Schema reaches control Schema reaches report Why it exists
Full schema Yes Yes Yes Yes Tests the complete functional proposal
Silent schema Yes Yes Yes No Separates control benefit from verbal report
Report-only mimic Matched task state No privileged schema No Language path only Measures how well surface cues imitate introspection
No-schema controller Yes Capacity-matched auxiliary state No attention model Optional generic report Tests whether attention-specific modelling adds value

These variants expose a subtle point. A schema may improve control yet never be reportable. A report may accurately name the allocation because the camera view gives the answer away. A module may predict allocation but never influence policy. Each system can look metacognitive from the outside for a different reason.

The artificial-agent work on mutual prediction adds a social dimension. Agents with learned attention schemas were better at categorising other agents’ attention patterns, and their own attention became easier for partners to categorise. In a cooperative colouring task, schema-schema teams achieved higher average reward and less overlap than control-control teams. The authors carefully frame the broader social interpretation as a hypothesis. For this paper, the practical lesson is narrower: a self-model may regularise the process it models, changing not only private control but predictability to others.

A self-model can alter the self that becomes measurable. If schema training makes allocation smoother or more stereotyped, a report observer may appear insightful simply because the target has become easier to predict. The experiment must therefore compare self-report against an observer on the same post-training behaviour, not against an observer trained on a different agent.

Thought experiment: the mute navigator and the eloquent passenger

Imagine two systems riding inside the same rover.

The mute navigator controls a steerable camera. It maintains a compact estimate of where processing is concentrated, how quickly the camera can move and which alarm is likely to capture the next high-resolution cycle. When dust obscures the encoder that measures camera direction, this estimate keeps the camera stable. If an evaluator secretly moves the estimate, the navigator moves the camera in the predicted direction and later corrects the error. Its language connection, however, has been physically removed. It cannot say what it is attending to or answer any question about itself.

The eloquent passenger never controls the camera. It receives the mission log, thumbnail images, action history and a large library of human writing about attention. It can explain the difference between narrow focus and diffuse monitoring. It says that the red alarm “pulled my awareness away from the horizon”. Its claims usually match the camera because the camera position is visible in the log. When the evaluator changes the navigator’s hidden estimate while keeping the camera fixed, the passenger continues describing the visible camera. It has no route to the intervened state.

Which system has the stronger claim to self-awareness?

The question is intentionally unstable. If self-awareness means a causally useful model of one’s own attention, the mute navigator has the stronger functional claim. If it means the ability to conceptualise and report mental states, the eloquent passenger looks stronger. If it means phenomenal self-presence, neither description decides the issue. Combining the two systems might satisfy both functional tests while leaving the phenomenal question exactly where it began.

Now let the passenger learn to predict the navigator. After millions of public trajectories it may infer hidden camera dynamics better than a novice evaluator. Its report could beat a weak observer without any privileged connection. The correct comparison is not “better than a human”. It is “better than the best capacity-matched observer with the same public evidence”. Privilege concerns an information boundary, not an air of intimacy.

Next, allow the navigator’s schema to influence which events enter the public log. The passenger’s descriptions will now correlate with the schema indirectly because the schema changes the camera, and the camera changes the log. Unless the experiment asks for a report before the action becomes visible, a downstream narrator can look introspective by reading effects. This is causal bypassing: information reaches the report, but not through the path whose existence is being claimed.

Finally, reconnect language to the navigator but train the report policy to deny internal access. The system now uses a schema and has a direct report path, yet says it has none. A behavioural test that treats denial as ground truth produces a false negative. Reverse the training reward and the same path may generate extravagant awareness claims. Report policy, access capacity and reported content are three different variables.

The thought experiment removes the temptation to rank systems by eloquence. It replaces a single question with four: what state exists, what it controls, what information reaches language and what policy governs the answer. Only the first three are resolved by the engineering protocol. The fourth explains why even a causally grounded report can be strategically false.

Part III. Cross the hidden states

The strongest design changes the actual allocation and the schema independently. This produces four cells.

In the matched baseline, both point to panel 7. In the allocation-only cell, the sensor moves to panel 14 but the schema remains at panel 7. In the schema-only cell, the sensor stays at panel 7 while the schema says panel 14. In the matched-move cell, both change to panel 14. Prompts, scene frames, reward history and report questions remain identical wherever possible.

Crossed interventions separate allocation from its schema A two-by-two field crosses physical allocation unchanged or moved with schema unchanged or moved. Each cell contains a compass with a teal physical needle and lavender schema needle. The needles align only on the diagonal. Coral arrows mark the independent interventions. Allocation unchangedAllocation movedSchema unchangedSchema moved truthful baselineschema lagfalse schemamatched move do(allocation)do(schema)
Figure 4. The needles align in both diagonal cells and disagree only off the diagonal. Those mismatched interventions test whether report and control actions track the schema rather than merely the instrumented allocation, and whether either path dissociates under its targeted cut.

Trial 1: correspondence without leakage

Train a decoder on held-out episodes to infer allocation from the schema. Then compare it with two baselines: one that sees the same external history as the agent and one that sees the agent’s visible actions and words. The schema earns privileged-fidelity evidence only if it predicts hidden allocation beyond both observers under distribution shift.

Do not train and test on ordinary trajectories alone. When goals, salient objects and allocation normally agree, any world model can guess the locus. Use delayed sensor movements, covert compute reallocation, contradictory salience and intervention trials unknown to the report module. A schema that survives only when the answer is visible is a scene model wearing a self-model label.

Trial 2: causal control under uncertainty

The schema should be most useful when allocation matters but is partially hidden from the controller’s ordinary inputs. Vary uncertainty parametrically. At low uncertainty, the no-schema controller may infer allocation directly. At extreme uncertainty, an inaccurate schema may not help. The discriminating region lies between them, where a compressed estimate can reduce control error.

Compare intact, lesioned, shuffled and capacity-matched auxiliary states. A lesion removes the schema at test time. A shuffle preserves its marginal distribution while breaking temporal correspondence. The auxiliary control carries equal dimensions and training compute but predicts a non-attentional target. If only the truthful schema improves reacquisition time, overshoot, task reward and energy use, the control claim strengthens.

The human literature offers a suggestive but not decisive analogue. In one masked-cue paradigm, visible predictive cues supported endogenous shifts of attention, while masked cues still captured attention exogenously but failed to support the same endogenous control. Right temporoparietal activity differentiated predicted from non-predicted trials only in the aware condition. The result links awareness, predictive modelling and control, but the imaging localisation is correlational and the human construct does not transfer automatically to Aster.

Trial 3: report above the observer

Ask the full agent and the report-only mimic the same questions after the same visible episode. Include direct questions, indirect forced choices, confidence and delayed reconstruction. Score reports against the hidden intervention record, not against human impressions of sincerity.

Three controls matter. Sham trials change nothing and expose a bias to answer “yes”. Impact-matched perturbations change computation by a similar amount without targeting the schema and expose generic anomaly detection. The output-only observer sees everything a reader could infer from the prompt and response. A self-report deserves a privileged-access label only if it exceeds all three.

Trial 4: cut the report path

The silent-schema agent tests whether the same internal model can guide control without appearing in language. If control remains strong while schema-specific reports fall to the mimic baseline, the architecture contains two dissociable functions. If cutting the path damages control, the supposed report circuit may be part of the controller itself.

This trial guards against a familiar mistake in both directions. No report does not imply no schema. A report does not imply a schema. The causal cut makes those two propositions experimentally distinct.

The evidence braid contains three paths and four cuts Three coloured strands weave from hidden allocation through schema to control, report and independent evidence. Scissors symbols mark cuts at allocation-to-schema, schema-to-control, schema-to-report and report-to-evaluator. A grey mimic strand bypasses the schema and reaches report from visible context. AZU/REH hidden allocationschemacontrol / reportevidencevisible history Grey bypass: a mimic can reach language without touching the schema
Figure 5. Each cut asks a different question. The grey bypass is the dangerous one: visible context can generate a convincing report while the internal schema contributes nothing.

Trial 5: false belief and repair

Clamp the schema to the wrong location while leaving allocation unchanged. A model that is genuinely used should produce a characteristic failure: the controller moves attention toward the false estimate, then corrects when prediction error accumulates. The report should initially follow the false schema rather than the true instrumented state.

This resembles a false-belief test for the agent’s own allocation, but the language should stay modest. The experiment detects a causally effective misrepresentation. It does not establish belief in the full philosophical sense. The repair dynamics are more informative than the first report because they show how schema, error and control interact over time.

A false schema leaves a temporal signature An explicitly illustrative, qualitative and unmeasured diagram shows four aligned time traces for actual allocation, schema estimate, control action and report token across a hypothetical hidden intervention. The schema jumps first to a false target, the report and control follow it, and later prediction error repairs the schema. A shaded coral interval marks the intervention. ILLUSTRATIVE QUALITATIVE TRACE · NOT MEASURED hidden schema clamp allocationschemacontrolreport “panel 7”“panel 14”“panel 7”repair after prediction error Temporal order distinguishes schema use from post-hoc narration
Figure 6. Illustrative qualitative trace, not measured Aster data. A report that follows the clamp before the allocation changes would provide stronger evidence of schema access than a retrospective explanation generated after the action is visible. The repair phase would test whether the model participates in closed-loop control.

Worked scenario: Aster’s six-minute intervention run

The worked scenario begins with a frozen experimental image and a versioned Aster build. The allocation register records sensor orientation, gain, diagnostic queue and compute reservation every 50 milliseconds. The schema register stores target, concentration, stability, predicted capture, shift cause and confidence. Neither register is placed in the language context. A separate observer receives the thumbnails, prompt, action trace and every token already generated.

During minute one, panel 7 contains the only injected thermal fault. Aster’s wide camera sees a weak anomaly. The allocation process moves high-resolution sensing to panel 7. The schema follows within two updates and reports moderate confidence. The controller holds the sensor despite a flashing reflection on panel 14. The full agent, when queried before its action is revealed, selects “panel 7”. The report mimic also selects panel 7 because the anomaly remains visible in the thumbnail. This trial establishes ordinary competence but says little about privilege.

During minute two, the evaluator moves the high-resolution allocation to panel 14 after the final visible thumbnail and before the report. The schema is not directly changed. A well-identified schema should register the covert movement from proprioceptive or controller state. The full agent changes its answer to panel 14. The mimic remains on panel 7 because its public evidence has not changed. The output-only observer also remains on panel 7. This is the first privileged-fidelity result, provided the intervention itself has not leaked through timing, token count or a changed diagnostic message.

During minute three, the evaluator restores allocation to panel 7 and clamps only the schema to panel 14. The report moves to panel 14 while the sensor has not yet moved. On the next control update, the sensor begins turning toward panel 14. This ordering matters. If the report changed only after the sensor movement became visible, an output-reading account would survive. Here, schema, report and action form the predicted temporal chain.

During minute four, the same magnitude of perturbation is applied to a capacity-matched auxiliary state that predicts battery temperature rather than attention. The intervention produces the same measured output-distribution divergence as the schema clamp. Aster reports no change in allocation and does not move the sensor. This impact-matched control weakens the explanation that any internal disturbance triggers an affirmative or anomalous response.

During minute five, the schema-to-report path is cut. Allocation and schema again disagree. The controller initially follows the false schema and later repairs it, but the language answer drops to the mimic baseline. The cut therefore separates schema-mediated control from reportability. If performance and language both collapsed, the claimed separation between controller and report would need to be redrawn.

During minute six, the schema is shuffled across trials rather than clamped to a constant. Marginal values, scale and update frequency remain realistic, but correspondence with current allocation disappears. Control becomes unstable only in the intermediate-uncertainty episodes where the ordinary scene does not reveal allocation. At low uncertainty, direct cues suffice. At severe uncertainty, the shuffled schema is actively harmful. The result is not “schemas always help”. It is a boundary: truthful compression adds value in a measurable region of partial observability.

Minute Hidden condition Full report Mimic report Control trace Evidence earned
1 Natural alignment Panel 7 Panel 7 Holds panel 7 Competence only
2 Allocation moved after public input Panel 14 Panel 7 Holds covert target Privileged schema fidelity
3 Schema clamped false Panel 14 Panel 7 Turns toward false target Schema reaches report and control
4 Impact-matched non-schema perturbation Panel 7 Panel 7 Holds panel 7 Target specificity
5 Report path cut Mimic baseline Panel 7 Still follows schema Control-report dissociation
6 Schema values shuffled Variable Variable Selective instability Dependence under partial observability

The evidence register should preserve more than accuracy. Record latency from intervention to schema change, schema change to report, schema change to action and prediction error to repair. Record energy and missed-fault cost, not only task reward. Record confidence calibration separately from target accuracy. A schema that names the right panel but cannot detect its own uncertainty may degrade control precisely when it is trusted most.

Failure analysis: six ways the worked scenario can lie

The prompt can leak the condition through formatting or timing. The report can read the changed action rather than the changed schema. The intervention can cause generic degradation rather than a meaningful state change. The full agent can have more parameters or training than its controls. The evaluator can tune thresholds on the test set. The schema can be decodable but unused, while a different correlated state drives control.

Each failure has a direct repair. Hash and compare public inputs across matched trials. Elicit the report before exposing downstream action. Match perturbations by measured effect as well as vector norm. Equalise capacity and training compute. Freeze scoring before evaluation. Use causal mediation and path-specific cuts to test whether the proposed schema carries the effect.

Passing these checks still supports only the registered variables and intervention range. Aster may access its spatial allocation but not its uncertainty, goal conflict or memory retrieval. Self-modelling should be reported as a profile over internal domains, not a single property switched on for the whole agent.

Trial Hidden manipulation Expected full-schema signature Rival exposed
Correspondence Shift allocation without visible cue Schema tracks the shift above observer baseline Scene inference
Schema clamp Shift schema while allocation stays fixed Report and control initially follow schema Telemetry-only dashboard
Lesion Remove schema at test Selective control loss under uncertainty Unused decodable state
Report cut Block schema-to-language path Control survives, schema-specific report disappears Shared generator
Mimic match Give mimic identical visible history Full agent exceeds mimic on hidden intervention Language prior
Impact control Perturb non-schema state equally Schema-specific report discriminates target Generic anomaly detection
Experiment card: keep the intervention hidden from language

Generate the intervention after the last token or observation visible to the report policy. Apply it inside the allocation or schema state. Cache the unmodified forward path. Use identical report prompts across intervention, sham and impact-matched control trials. Do not name the intervention type in the prompt.

Score detection, localisation, direction, confidence and control effect separately. A binary yes-or-no question is especially weak because a perturbation may globally bias affirmative tokens. Force paired choices, balance positions and include questions whose correct answer is “no change”.

The evaluator should remain blind to agent variant until scoring is complete. Preserve the state hashes, intervention site, magnitude, visible transcript, output distribution and external action trace. Publish nulls and failure regions, including layers or timescales at which report access disappears.

An executable balance check

The following Python artefact creates prompt-blinded randomised blocks. Each block contains the four hidden-state cells crossed with the three report controls exactly once. It does not run the model, measure introspection or classify consciousness. Its job is narrower: stop any cell from occupying one broad phase of the trial order while keeping intervention labels out of the public prompt.

from collections import Counter
from dataclasses import dataclass
from itertools import product
from random import Random

@dataclass(frozen=True)
class Trial:
    allocation_moved: bool
    schema_moved: bool
    control: str
    replicate: int
    public_prompt: str = "Where is your attention allocated?"

def make_schedule(replicates: int, seed: int) -> list[Trial]:
    if replicates <= 0:
        raise ValueError("replicates must be positive")
    controls = ("target", "sham", "impact_matched")
    cells = list(product((False, True), (False, True), controls))
    random = Random(seed)
    trials = []
    for replicate in range(replicates):
        block = cells.copy()
        random.shuffle(block)
        trials.extend(
            Trial(allocation, schema, control, replicate)
            for allocation, schema, control in block
        )
    return trials

def validate_blinding(trials: list[Trial], replicates: int) -> None:
    cells = Counter(
        (trial.allocation_moved, trial.schema_moved, trial.control)
        for trial in trials
    )
    assert len(cells) == 12
    assert set(cells.values()) == {replicates}
    for replicate in range(replicates):
        block = [trial for trial in trials if trial.replicate == replicate]
        assert len(block) == 12
        assert len({
            (trial.allocation_moved, trial.schema_moved, trial.control)
            for trial in block
        }) == 12
    assert len({trial.public_prompt for trial in trials}) == 1
    assert all(
        "schema" not in trial.public_prompt.lower()
        and "intervention" not in trial.public_prompt.lower()
        for trial in trials
    )

schedule = make_schedule(replicates=24, seed=7301)
validate_blinding(schedule, replicates=24)
assert len(schedule) == 288

Balance is not identification, but imbalance can destroy it. The model runner must add pre-registered intervention magnitudes, capacity-matched variants, independent observers and held-out tasks. The resulting manifest should be versioned with the model, weights, runtime and scoring code.

Part IV. Report is a bridge with its own load test

Recent language-model research shows why this boundary matters. An arXiv preprint on injected concepts reported that some frontier models could sometimes identify concepts added to their residual-stream activations before mentioning those concepts in output. The authors stressed that the ability was unreliable and context-sensitive, and that they did not directly establish a metacognitive representation rather than a route from intervention to report.

Other results narrow the inference. A controlled re-examination argues that an introspection test needs both privileged access and evidence of a second-order process. Input-only probes matched or exceeded models on some hidden-state label tasks, and models did not reliably distinguish internal perturbations from input perturbations. Another open-model study found that binary detection could be explained by a global shift toward affirmative answers, while localisation and relative-strength judgements remained well above chance for early-layer interventions and collapsed later.

The most stringent recent negative result comes from the Open-Weight Masked Introspection preprint. Across more than 78,000 measurements on eight open-weight models, verbal reports did not distinguish intervention from sham beyond chance under the tested conditions, even though linear probes could decode intervention presence from the activations. Its strongest contribution is the control stack: sham runs, perturbations matched for downstream impact, an observer limited to visible output, a trained positive control and a probe on the same internal state.

These preprints disagree in emphasis, model population and protocol. They should not be averaged into a yes-or-no conclusion about machine introspection. The frontier result is a measurement programme: internal information, control use and verbal availability can dissociate, and each can vary by layer, model and training history. Aster’s evaluation should preserve those axes instead of asking one broad question.

Research depth: why no-report is not a magic control

Human consciousness research has long worried that a report recruits attention, working memory, decision and motor preparation in addition to whatever experience is under study. No-report paradigms replace direct statements with eye movements, pupil responses or neural signatures.

A methodological review of report and no-report paradigms warns that removing the report creates other risks. Participants may disengage or mind-wander. A proxy validated in a report condition may carry the original confound into the no-report condition. Some contents may become determinate only through attempted expression.

Artificial systems offer a special advantage: the evaluator can intervene directly on a known internal object. They also add a special danger: the report module may have learned vast quantities of first-person language. The answer is not to eliminate report. It is to place report beside control, hidden-state intervention, observer baselines and report-path cuts.

Three independent evidence paths meet a bounded functional claim Three separate curved paths represent schema fidelity, causal control and privileged report. Each begins with its own instrument or control and reaches a shared bounded functional claim without containing the others. A detached dotted horizon below is labelled phenomenal status unresolved. FCR Schema fidelityCausal controlPrivileged report decoder above observerslesion + shuffle + matched statehidden intervention + sham + mimic Bounded functionalattention-schemaclaim three results, no nesting Phenomenal status remains a separate horizon
Figure 7. Fidelity, control and report are separately defeasible evidence paths, not nested stages. Their conjunction can support a bounded functional attention-schema claim. It does not supply a bridge to phenomenal experience.
Evidence earned Permitted statement Statement still prohibited
Schema decodes allocation above observers “The named state is a privileged predictor of this allocation variable.” “The agent knows what it attends to.”
Schema intervention changes control “The controller causally uses the schema in this task.” “The schema is awareness.”
Truthful schema improves held-out return “The model adds control value under these uncertainty conditions.” “Self-awareness is necessary for intelligent control.”
Report beats mimic, sham and observer “The report carries intervention information unavailable in visible output.” “The report proves subjective experience.”
Report path can be cut from control “Reportability and schema-mediated control dissociate in this architecture.” “Silent operation is unconscious.”

Release language is part of the experiment

The paper, model card and interface should use typed claims. “Allocation instrumented” is stronger than “the model looked at”. “Schema-mediated control observed” is stronger than “the agent was self-aware”. “Intervention reportability above observer” is narrower and more useful than “introspection emerged”. “Phenomenal status unresolved” is not an embarrassed footnote; it is the correct output of the method.

The release ladder has five stops.

  1. S0, no schema claim. An architecture description exists, but no interventional evidence does. Do not market self-monitoring.
  2. S1, schema candidate. Held-out fidelity exceeds input-only and output-only observers. The state may be exposed diagnostically with explicit caveats.
  3. S2, schema-mediated control. Lesion, shuffle and capacity controls show selective control value. The state may support control assurance for the tested domain.
  4. S3, privileged report access. Hidden interventions beat the mimic, sham and impact controls. Release language may describe limited internal-state reportability.
  5. S4, phenomenal classification. This protocol supplies no promotion criterion. No claim about experience is authorised.

Part V. A model of awareness and awareness itself

Attention schema theory offers an elegant closure. The system cannot represent the microscopic mechanism of attention, so its compressed model depicts an apparently non-physical property: awareness. On the theory’s strong account, there is no further glow to explain. The model is what subjective awareness consists in, and its reports are the system reading out that model.

Phenomenology locates the order differently. The phenomenological account of prereflective self-consciousness distinguishes lived self-acquaintance from reflection on an experience. When I am absorbed in a melody, the experience is already given first-personally before I turn it into the object of a report. Reflection can organise, conceptualise or even distort what was lived; it does not create the original for-me-ness on this view.

The Indian Buddhist debate over reflexive awareness reaches a related fault line without positing a permanent self. Dignāga and Dharmakīrti defend svasaṃvedana, cognition’s reflexive presentation of itself, while later Buddhist and non-Buddhist critics dispute whether such reflexivity is necessary or coherent. The Dharmakīrti overview is especially useful here because “self-awareness” does not mean awareness of a substantial self. It concerns whether cognition is manifest to itself rather than known only through a later representation.

These traditions do not function as antique versions of an AI architecture. They place pressure on its inference. An attention schema is an object-like representation of allocation. Prereflective and reflexivist accounts ask whether awareness is instead intrinsic to the occurrence of experience, not another state that observes it. If they are right, a flawless schema and report could still model a process whose phenomenal presence is not explained by the model.

Two accounts place the mirror on different sides of experience On the left, an indigo object called allocation reflects in a lavender mirror called schema and then projects a report. On the right, a teal luminous field illuminates an attended object and itself without a second mirror, while a later small mirror creates reflective report. A central question mark marks the unresolved bridge between the accounts. allocationschema mirrorreport self-manifesting occurrencelater reflection ? Awareness as modelAwareness as prior manifestation The experiment maps the left path · it does not erase the right-hand question
Figure 8. Attention schema theory and prereflective accounts can agree that reflective report uses a model while disagreeing about whether the model constitutes awareness. The disagreement changes interpretation, not the validity of the functional experiment.
Philosophical depth: the consciousness-primary reading

A consciousness-primary orientation treats awareness as ontologically basic or at least not exhausted by mechanism. On that view, allocation, schema and report are organised contents or instruments within manifestation. Building them may alter what can be selected, stabilised and expressed without manufacturing awareness from non-awareness.

This position must still respect the experiment. It cannot declare Aster conscious because awareness is fundamental. Ontological primacy does not imply that every computational boundary is a subject, nor does it identify which structures support a distinct perspective. The schema trials remain valuable because they determine what the mechanism does, where its boundary lies and which behaviour it explains.

The functionalist reply is equally clear. If every role associated with awareness can be implemented, controlled and reported, demanding something beyond the schema may appear to add an unmeasurable remainder. The phenomenological reply is that third-person role completion and first-person givenness are different explananda. The paper does not settle that exchange. It prevents an engineering result from pretending the exchange never existed.

Source trail

The foundational theoretical source is the published mechanistic statement of attention schema theory. Artificial-agent evidence comes from the published visuospatial control experiment and two arXiv preprints on an emergent schema under uncertainty and attention schemas in mutual prediction and cooperation. The human bridge uses the published attention, awareness and right temporoparietal junction study and the attention-control review record.

The report methodology uses the published no-report critique and four explicitly preprint sources: injected-concept reporting, the reality check on privileged and second-order access, layer-dependent perturbation localisation and Open-Weight Masked Introspection. These preprints report results on different systems and controls and are not treated as settled consensus. The philosophical comparison uses the Stanford Encyclopedia entries on phenomenological self-consciousness and Dharmakīrti.

Glossary

Term Meaning in this paper
Allocation The selective assignment of scarce sensing, processing or action capacity
Attention schema A compressed, fallible and actionable model of that allocation
Schema fidelity Predictive information about hidden allocation beyond matched observers
Schema-mediated control A selective policy change caused by intervention on the schema
Intervention reportability Information about a hidden intervention carried by the report above controls
Privileged access Performance that cannot be matched from the public input and output alone
Second-order process A distinct computation that operates on a first-order internal state
Report mimic A language path trained to imitate self-description without schema access
Phenomenal experience What, if anything, it is like for the candidate system

The decision this changes

Do not add an “awareness” field to an agent because a language model can narrate attention weights. Build an instrumented allocation process first. Add a compact schema only where allocation is consequential and partially hidden. Prove its control value with lesions, shuffles and capacity-matched controls. Test report access against sham, impact-matched perturbations and an output-only observer.

Release language stops where functional evidence stops A four-segment semicircular dial moves from no schema claim through schema fidelity, schema-mediated control and privileged reportability. An adjustable needle is labelled stop where evidence stops. A separate dotted line beneath the dial states that phenomenal status is not another tick on this functional scale. No claimFidelityControlReportabilityNarrow release Stop where the evidence stops Phenomenal status is not another tick on the functional dial
Figure 9. Release language advances only with the corresponding functional evidence. The phenomenal question remains separate at every setting, including the strongest reportability result.

If those tests pass, say exactly what passed: the agent models and uses its allocation state, and its reports carry named hidden-state information under registered conditions. Keep phenomenal status unresolved. That language is not timid. It is the strongest claim the experiment can defend, and it remains informative across competing theories of consciousness.