(4/5) Where does the shortcut live?
Activation patching localizes it to early-mid layers (~2–10). For affix-class drugs, affixes alone reproduce most of the effect.
A single low-rank direction can flip fake-drug acceptance. Affix signals emerge early in training; holistic knowledge comes later.
