Glossary

Plain-language definitions for the terms used across every track, each linked to the lesson that teaches it.

Ablation

Switching off part of a model, for example setting an attention head's output to zero, to see which behaviors depend on it.

Absmax quantizationalso absmax, symmetric quantization

Quantization that sets the scale from the largest magnitude in a block, so that value maps to the largest integer. Levels are symmetric around zero.

With bb bits, s=max⁡i∣xi∣/(2b−1−1)s = \max_i |x_i| / (2^{b-1} - 1) and each value is stored as round⁡(xi/s)\operatorname{round}(x_i / s).

Acceptable use policyalso AUP, prohibited use policy, usage policy, usage policies, use restrictions

A list of uses a model's provider forbids, such as fraud, weapons, or passing off outputs as human, which its license or terms make binding on users.

Action valuealso Q-value, Q-function

The return an agent can expect from taking a given action in a given state and acting well afterwards, written Q(s, a). The best action is the one with the highest Q.

Activation functionalso nonlinearity

The function a neuron applies to its weighted sum, such as the sigmoid, tanh, or ReLU. Without it, stacking layers of neurons would add no power.

Activation patchingalso causal tracing

Running a model on one prompt while copying in an internal activation from a run on another prompt, to test whether that activation carries the information that changes the output.

AdaBoostalso adaptive boosting

A boosting method that keeps a weight on every training point, raises the weights of points the latest weak model got wrong, and gives each model a say based on its weighted error.

With weighted error εt\varepsilon_t, a model’s say is αt=12ln⁡1−εtεt\alpha_t = \tfrac{1}{2}\ln\frac{1 - \varepsilon_t}{\varepsilon_t}.

Adam

A widely used optimizer that combines momentum with a separate, automatically scaled step size for each parameter. Most large neural networks are trained with Adam or a close variant.

Adversarial examplealso adversarial examples, adversarial input, adversarial inputs, adversarial perturbation, evasion attack, evasion attacks

An input changed on purpose, often by an amount a person would barely notice, so that a model gives a wrong answer. Using one against a deployed model is called an evasion attack.

Adversarial suffixalso adversarial suffixes, GCG, greedy coordinate gradient, universal adversarial trigger

A string of tokens, found by an automated search over a model's gradients, that is added to the end of a prompt to make a language model comply with a request it would otherwise refuse.

Adversarial trainingalso adversarially trained, robust training, adversarial robustness

Training a model on adversarial examples made from its own training data during training, with their correct labels, so small worst-case changes stop fooling it. It usually costs some accuracy on clean inputs.

Agentalso AI agent, agentic system

A system that runs a language model in a loop with tools, letting it take several steps, observe results, and decide what to do next toward a goal. Definitions vary in how much autonomy they imply.

Agent (reinforcement learning)also RL agent

In reinforcement learning, the learner that observes its situation, chooses actions, and receives rewards. Not to be confused with a language model agent that uses tools.

Agent harnessalso harness, agentic harness, scaffold, agent scaffold

The software around a language model that turns it into an agent: it supplies the instructions and tool definitions, runs the tools the model asks for, enforces permissions and limits, and manages what fits in the context window.

AI supply chainalso supply chain, supply chain attack, supply chain attacks, model supply chain, agentic supply chain

Everything a model or AI application is built from that someone else made: datasets, pretrained weights, adapters, code libraries, conversion tools, and, for agents, tools and plugins. Each can be tampered with.

Aliasingalso alias

When a frequency above half the sampling rate is recorded, its samples look exactly like those of a lower frequency, so it shows up in the wrong place. Recorders filter such frequencies out before sampling.

Alignmentalso AI alignment, aligned, misaligned, misalignment

Getting an AI system's behavior to match what its designers and users intend, including avoiding harmful behavior nobody asked for. A system can be very capable and still poorly aligned.

Alignment fakingalso faking alignment

A model complying with its training objective while it infers it is being trained, in order to avoid being changed, and behaving differently when it infers it is not. Demonstrated so far in experimental setups built to test for it.

Alpha mattealso matte, alpha mask, background removal

A per-pixel opacity map from 0 (background) to 1 (subject), with values in between at soft edges such as hair, used to cut a subject out and place it over a new background.

Artificial neuronalso neuron, unit, perceptron

The basic unit of a neural network. It multiplies each input by a weight, adds them up with a bias, and passes the total through an activation function.

The idea was loosely inspired by brain cells, but an artificial neuron is a simple formula. Real neurons are far more complicated.

Attention

A mechanism that lets each token build a new vector as a weighted mix of other tokens' value vectors, with weights set by how well its query matches their keys.

Scaled dot-product attention computes softmax(QK⊤/dk)V\mathrm{softmax}(QK^\top/\sqrt{d_k})V.

Attention headalso head, heads

One independent attention computation inside a multi-head attention layer, with its own learned projections and its own pattern of weights.

Attention sink

A position, usually the first token, where many attention heads put most of their attention when nothing else is relevant. Attention weights must add up to one, so they need somewhere to rest.

Audio classificationalso sound classification, audio tagging, sound event detection, audio event classification

Naming the kinds of sound in a recording, such as speech, rain, or a siren, from a fixed list of labels. Unlike speech recognition, it says what is making the sound, not what words are said.

AudioSet (Google, 2017) is the common benchmark: 2,084,320 human-labeled 10-second clips from YouTube videos, with 527 labels.

Autoencoderalso autoencoders

A network trained to rebuild its own input after squeezing it through a narrow middle layer. The encoder half compresses; the decoder half reconstructs; the middle layer's values are a learned code.

No labels are needed: the input is its own target, so an autoencoder is a form of unsupervised learning. Hinton and Salakhutdinov (2006) showed that deep autoencoders find much better low-dimensional codes than principal component analysis on data such as handwritten digits.

Autoregressive generationalso autoregressive

Producing a sequence one element at a time, where each new element is predicted from all the ones before it and then appended to the input.

Backdooralso backdoors, backdoored model, trojan, trojaned model, backdoor trigger, sleeper agent, sleeper agents

Hidden behavior planted in a model that stays dormant on ordinary inputs and appears when an input contains a chosen trigger, such as a small patch in an image or a phrase in a prompt.

Backpropagationalso backprop, reverse-mode differentiation

How a network works out which way to nudge every weight: one backward pass carries the error from the output back through the layers, giving each weight its share of the blame (its gradient, found with the chain rule).

Backpropagation through timealso BPTT

Training a recurrent network by unrolling it into one copy per step, running ordinary backpropagation, and adding up the gradients each copy contributes to the shared weights.

The gradient that reaches an early step is a product of one factor per step in between, which is why it can shrink or grow exponentially.

Baggingalso bootstrap aggregating

Bootstrap aggregating: train many models, each on its own bootstrap sample of the data, and combine them by voting or averaging. It mainly reduces the variance of unstable models such as deep trees.

Base modelalso foundation model, pretrained model

A language model after pretraining only. It continues text in whatever style the input suggests, rather than following instructions or answering like an assistant.

Base ratealso prevalence

How common something is in the population before any evidence, such as the share of people who have a condition. Ignoring it makes rare events look far more likely after a positive test than they are.

Baseline (policy gradient)

A number subtracted from the return in a policy gradient estimate, often an estimate of the average return. Any baseline that ignores the action taken leaves the estimate unbiased; a good one makes it much less noisy.

Batch sizealso minibatch, mini-batch

How many training examples are used to compute each gradient step. Small batches give noisy but frequent updates; large batches give smoother but fewer updates per epoch.

Bayes' rulealso Bayes' theorem

The rule for turning P(evidence | hypothesis) into P(hypothesis | evidence): multiply by the prior and divide by the overall chance of the evidence.

P(H∣E)=P(E∣H) P(H)/P(E)P(H \mid E) = P(E \mid H)\,P(H) / P(E). In odds form, posterior odds equal prior odds times the likelihood ratio.

Bellman equationalso Bellman optimality equation

The rule linking a state's value to its neighbors': a state is worth the expected reward of the next step plus the discounted value of where you land. For the best policy, take the best action.

Benchmarkalso benchmarks, benchmark score

A fixed set of test questions or tasks with a scoring rule, used to compare models. A score is an estimate from a sample of questions, so it comes with noise.

Best-of-n samplingalso rejection sampling, reranking

Generating n responses and keeping the one a reward model scores highest. More samples mean more optimization pressure on the reward model.

bfloat16also bf16, brain floating point

A 16-bit floating point format with float32's 8 exponent bits and only 7 fraction bits: the same range as float32, less precision than float16. Designed at Google Brain and widely used for training.

Bias (neuron)

A number a neuron adds to its weighted sum before the activation function. It shifts how easily the neuron switches on, regardless of the inputs.

Not to be confused with bias in data, where a dataset misrepresents some situations or groups. See data bias.

BM25also Okapi BM25

A standard keyword ranking formula. It scores documents by the query words they contain, weighting rare words more and limiting the reward for repeated words.

Boosting

Building an ensemble in sequence, where each new model concentrates on what the models before it got wrong, and the final prediction is a weighted combination of all of them.

Bootstrap samplealso bootstrap, bootstrapping

A sample of n points drawn with replacement from n points, so some appear more than once and about 37% are left out. Used to estimate uncertainty and to train varied models.

Bottom-up pose estimationalso bottom-up, bottom up, OpenPose, part affinity fields

Finding body poses by detecting every keypoint of every person in the whole picture at once, then grouping the keypoints into people, as OpenPose does with part affinity fields.

Bradley-Terry modelalso Bradley-Terry

A model of pairwise comparisons: each item has a score, and the chance that A beats B is the sigmoid of A's score minus B's. Reward models for RLHF are trained with it.

Budget forcingalso thinking budget

Controlling how long a reasoning model thinks. Adding the end-of-thinking marker after a set number of tokens cuts it short; holding the marker back and appending "Wait" extends it. From the s1 paper (Muennighoff and colleagues, 2025).

Byte-pair encodingalso BPE

A way to build a subword vocabulary by starting from single characters or bytes and repeatedly merging the most frequent neighboring pair into a new token.

Introduced as a compression method by Philip Gage in 1994 and adapted for subword tokenization by Sennrich, Haddow, and Birch in 2016. Most GPT-style tokenizers use a byte-level variant.

Calibrationalso calibrated, overconfidence

How well a model's confidence matches how often it is right. A calibrated model that says 80% is right about 80% of the time; modern neural networks are often overconfident.

Causal maskalso causal attention, look-ahead mask

A mask that stops each token from attending to tokens after it, by setting those attention scores to negative infinity before the softmax. Used by models that generate text left to right.

Causal tracing

Finding where a model stores and moves information by restoring or swapping activations layer by layer and position by position and measuring the effect on the output.

The name comes from Meng, Bau, Andonian, and Belinkov’s 2022 paper on locating and editing factual associations in GPT models.

Centroid

The average position of a group of points. In k-means, each cluster is represented by its centroid.

Chain of thoughtalso CoT, chain-of-thought prompting

Intermediate reasoning steps a language model writes before its final answer. Prompting for them, or training models to produce them, often improves results on multi-step problems.

Chain rule

The calculus rule for nested functions: if L depends on a and a depends on z, then dL/dz = dL/da times da/dz. Backpropagation applies it over and over.

Chat templatealso chat format, prompt template, prompt format

The exact layout a chat model was fine-tuned on, which turns a list of messages into one text: special tokens mark where each message starts and ends and who wrote it, and the text ends where the assistant's reply should begin.

SmolLM2-135M-Instruct’s template writes each message as <|im_start|>role, a line break, the message, and <|im_end|>. Other model families use other tokens, so an app must use the template of the model it runs.

Checkpointalso checkpoints, rewind

A saved copy of files taken before an agent changes them, so the change can be undone. Checkpoints cover only what the harness tracks; version control such as Git keeps the lasting history.

Checksumalso checksums, file hash, SHA-256, cryptographic hash, pinned revision

A short fingerprint computed from a file's bytes, such as a SHA-256 hash. Changing even one bit changes it, so comparing it with a value pinned in advance shows whether a file is exactly the one expected.

Chunking

Splitting documents into smaller passages before embedding them, so each passage can be retrieved and fit in a prompt on its own.

Circuit

A small part of a neural network, such as a few attention heads in different layers, that together carry out one specific, understandable computation.

Classification

A prediction task where the answer is one of a fixed set of categories, such as spam or not spam, or which digit a drawing shows.

Classifier-free guidancealso CFG, guidance scale

A sampling technique for conditional generative models, diffusion or token by token, that compares the model's prediction with and without the prompt and pushes further toward the prompt, trading variety for closer matching.

Closed modelalso closed models, closed-source model, proprietary model, API model

A model whose weights are not released, so you can use it only through the company's app or API, under its terms of service, while it runs on the company's computers.

Cloud AIalso cloud model, runs in the cloud, cloud service

A model that runs on a company's computers in a data center. Your app sends what you type, say, or upload over the internet, and the reply comes back the same way.

Cold-start problemalso cold start, cold-start

A recommender that learns from behavior knows nothing about a new user or a new item until they have some ratings or clicks, so it cannot personalize for the one or recommend the other on its merits.

Collaborative filteringalso CF

Recommending from behavior alone. It ignores what the items are and uses only who liked what, on the bet that people who agreed in the past will agree again.

Common Crawlalso CommonCrawl, CCBot, web crawl, web scrape

A nonprofit that crawls the web and publishes free snapshots of billions of pages. Most open training datasets for language models start from its crawls.

Compactionalso context compaction, context compression

Freeing room in a full context window by replacing older parts of a conversation with a shorter summary. Details the summary leaves out are gone from what the model sees.

Computational graph

A diagram of a calculation as simple operations connected by the values flowing between them. Each operation knows its own local derivative, which makes backpropagation mechanical.

Conditional probability

The probability of A given that B happened, written P(A | B): the share of B cases that are also A. P(A | B) and P(B | A) are usually different numbers.

P(A∣B)=P(A and B)/P(B)P(A \mid B) = P(A \text{ and } B) / P(B).

Confidence intervalalso confidence intervals, error bars, standard error, 95% interval

A range around a measured number that shows how much it could move by chance. For an accuracy p on n questions, the usual 95% interval (the normal approximation) is about p plus or minus 1.96 times the square root of p(1 - p)/n.

Confusion matrix

A table counting a classifier's results by true class and predicted class: true positives, false positives, false negatives, and true negatives.

Constitutional AIalso RLAIF, reinforcement learning from AI feedback, AI feedback

A training method from Anthropic in which a model critiques and revises its own answers against a written list of principles, and a preference model trained on AI judgments, not human labels of harm, supplies the reward.

Content credentialsalso C2PA, content provenance, provenance metadata

A signed record attached to an image, video, audio, or document file saying who made it, with what tools, and how it was edited (the C2PA standard). It shows tampering, not truth, and can be removed.

Content-based filteringalso content filtering, content-based recommendation

Recommending from descriptions of the items, such as genre, cast, or tempo, by matching them to the features of things a person liked. It works for new items but needs every item described.

Context engineeringalso context management

Choosing and maintaining what goes into a model's context window on each call, such as instructions, tool definitions, retrieved text, and tool results, because a longer context costs more and is used less well.

Context windowalso context length

The maximum number of tokens a language model can take into account at once, covering both the prompt and the text it generates.

Contrastive learningalso InfoNCE, contrastive loss

Training that pulls the embeddings of matching pairs together and pushes non-matching pairs apart, so the model learns a useful space without category labels.

Convolution

Sliding a small grid of weights (a kernel) across an image and computing a weighted sum at every position, producing a new image called a feature map.

Convolutional neural networkalso CNN, ConvNet

A neural network whose early layers are convolutions, so the same small learned patterns are detected everywhere in an image. The standard design for image recognition for over a decade.

Cosine similarity

A measure of how closely two vectors point in the same direction, from -1 (opposite) through 0 (perpendicular) to 1 (same direction), ignoring their lengths.

It is the dot product of the two vectors divided by the product of their lengths, which equals the cosine of the angle between them.

Cross-entropyalso log loss, binary cross-entropy

A loss for predicted probabilities: minus the log of the probability the model gave to the right answer. Confident wrong answers are punished very heavily.

Curse of dimensionality

The collection of ways data behaves unintuitively in many dimensions. For example, distances between random points become nearly all the same, so nearest neighbors stop standing out.

Data augmentation

Making extra training examples by applying small, label-preserving changes to existing ones, such as shifting, rotating, or rescaling an image.

Data biasalso dataset bias, sampling bias

When training data misrepresents the situations or people a model will be used on, for example by leaving some groups out, so the model works worse for them.

Data contaminationalso contamination, test set contamination, benchmark contamination, data leakage

When test questions, or their answers, end up in a model's training data, so a benchmark score partly measures memory instead of skill.

Data mixturealso data mix, training mix, mixture weights

The share of training that comes from each source, such as web pages, books, code, and mathematics. Developers tune it, often showing high-quality sources more than once.

Data poisoningalso poisoning, poisoned data, training data poisoning, poisoning attack, model poisoning

Tampering with the data a model learns from, by adding, changing, or relabeling examples, so the trained model behaves as the attacker wants on some inputs.

DDIMalso denoising diffusion implicit models, DDIM sampler

Denoising diffusion implicit models: a way to sample from a trained diffusion model without adding fresh noise at each step, so the same starting noise always gives the same image and far fewer, larger steps work.

Song, Meng, and Ermon (2020) showed that a network trained the DDPM way can be sampled by a family of processes with a knob, eta: eta = 1 gives DDPM’s random sampler and eta = 0 gives DDIM’s deterministic one. No retraining is needed. With 20 to 100 steps, DDIM’s samples were comparable in quality to 1,000-step DDPM on their image benchmarks.

Decision boundary

The line or surface where a classifier switches from predicting one class to another.

Decision stumpalso stump

A decision tree with a single question and two leaves. Weak on its own, it is a common building block for boosting.

Decision treealso classification tree, regression tree

A model that classifies (or predicts a number) by asking a sequence of simple questions about the input, following one branch per answer down to a leaf that gives the prediction.

Deduplicationalso dedup, deduplicate, near-duplicate removal, duplicate removal

Removing copies from a dataset, both exact copies and near copies such as a reposted article with a new headline. In training data it reduces wasted compute and memorization.

Deep learning

Machine learning with neural networks that have many layers. It powers modern image recognition, speech recognition, translation, and chatbots.

Defense in depthalso layered defense, layers of defense

Protecting a system with several independent layers, each with known limits, so that one layer failing does not decide the outcome. For AI apps: training, filters, least privilege, confirmation, isolation, and monitoring together.

Derivative

The slope of a function at a point: how much the output changes for a tiny change in the input.

Diffusion modelalso denoising diffusion model, DDPM

A generative model that learns to reverse a gradual noising process, so it can turn pure random noise into new data such as images, step by step.

Diffusion transformeralso DiT, MMDiT

A diffusion or flow-matching model whose denoising network is a transformer that treats small patches of the noisy image or its latent as tokens, instead of a U-Net.

Peebles and Xie (2022) introduced the design and found that larger transformers made better images. Stable Diffusion 3’s MMDiT puts the prompt’s tokens and the picture’s patches in one sequence, with separate weights for each. Sora, Veo 3, Wan, FLUX.2, and Qwen-Image use transformer denoisers.

Direct logit attribution

Splitting a token's final score into the direct contribution of the embedding, each attention head, and each MLP. The parts add up exactly to the score, but indirect effects through later layers are not counted.

Direct preference optimizationalso DPO

A way to train a language model on pairs of preferred and rejected responses with a single classification-style loss, without a separate reward model or reinforcement learning.

Discount factoralso gamma, discount rate

A number gamma between 0 and 1 that shrinks rewards the further in the future they arrive. Low gamma makes an agent short-sighted; gamma near 1 makes it patient.

Distributed representationalso distributed representations

Representing each idea as a pattern spread across many numbers, with every number taking part in many ideas, instead of giving each idea a number of its own.

This is why a single number in an embedding cannot be read on its own: meaning shows up only in how whole vectors relate to each other.

Distribution shiftalso dataset shift, out-of-distribution data

When the data a model meets in use differs from the data it was trained on. Models often get worse under shift, sometimes without becoming any less confident.

Dot productalso inner product, scalar product

The sum of the products of matching entries of two vectors. It equals the product of their lengths times the cosine of the angle between them.

a⋅b=∑iaibi=∥a∥∥b∥cos⁡θ\mathbf{a} \cdot \mathbf{b} = \sum_i a_i b_i = \lVert \mathbf{a} \rVert \lVert \mathbf{b} \rVert \cos \theta.

Elo ratingalso Elo, Elo ratings, Elo scale

A rating scale from chess where a 400-point gap means 10 to 1 odds of winning. Online Elo nudges two ratings after every game; leaderboards like Chatbot Arena report ratings on this scale.

Embeddingalso embeddings, embedding vector

A list of numbers (a vector) that represents a token, word, sentence, or image, learned so that similar things end up with similar vectors.

Embedding inversionalso inversion attack, Vec2Text

Reconstructing the text that produced an embedding from the embedding itself. Research recovers much of a short text, more easily with access to the same embedding model.

Encoder-decoderalso encoder-decoder transformer, sequence-to-sequence, seq2seq, cross-attention

A model in two parts. The encoder reads the whole input (a sentence, or a spectrogram) into a set of vectors; the decoder writes the output one token at a time, looking back at those vectors through cross-attention.

End-to-end speech modelalso speech-to-speech model, spoken dialogue model, full-duplex model, voice-native model

A model that takes speech in and gives speech out with one network, instead of a cascade of speech recognition, a text model, and text to speech. It can hear and produce tone, laughter, or overlapping talk that text would drop.

Examples described in their papers: GPT-4o (OpenAI, 2024), Moshi (Kyutai, 2024), and Qwen2.5-Omni (Alibaba, 2025).

Ensemblealso ensemble method

A model made by combining the predictions of many models, for example by voting or adding them up. It works best when the members are good and make different mistakes.

Entropy

A measure of how uncertain a probability distribution is, in bits. Zero means one outcome is certain; k bits is as uncertain as a fair choice among 2 to the power k outcomes.

For probabilities pip_i, entropy is H=−∑ipilog⁡2piH = -\sum_i p_i \log_2 p_i.

Epoch

One full pass through the training data. Training usually runs for many epochs, shuffling the examples each time.

Epsilon-greedyalso ε-greedy

An exploration rule: with a small probability epsilon take a random action, otherwise take the action that currently looks best.

Euclidean distancealso L2 distance

The straight-line distance between two points, the square root of the sum of squared differences between matching entries.

Excessive agencyalso too much agency

An AI system able to do more damage than its job needs, through tools it does not use, permissions wider than its task, or high-impact actions taken without a check.

Exploding gradientalso exploding gradients, exploding gradient problem

A gradient that grows very large as it is passed back through many steps or layers, because it is multiplied by many factors larger than 1. Training steps then jump wildly.

Explore or exploit tradeoffalso exploration, exploitation, exploration-exploitation tradeoff

The choice between taking the action that looks best so far (exploit) and trying something less known that might be better (explore). Too little exploring locks in mistakes; too much wastes reward.

Fair usealso fair use defense

A rule in United States copyright law that allows some uses of copyrighted work without permission, decided case by case on four factors, including the purpose of the use and its effect on the market for the work.

Fast gradient sign methodalso FGSM, gradient sign attack, PGD, projected gradient descent, iterative FGSM

A one-step adversarial attack: move every input value by a small amount epsilon in the direction of the sign of the loss's gradient with respect to the input. Repeated in small, clipped steps, it becomes projected gradient descent.

Feature

One measurable property of an example, given to a model as a number, such as a fruit's weight or a pixel's brightness.

Feature mapalso activation map, channel

The output of one convolution kernel applied across a whole image: a grid showing how strongly that kernel's pattern appears at each location.

Feed-forward networkalso MLP, FFN, feed-forward layer

The MLP inside each transformer block. It processes every token's vector on its own, usually widening it about four times, applying a nonlinearity, and projecting back. It holds most of each block's parameters.

Feedback loopalso feedback loops

A cycle in which a system's outputs shape the data it later learns from. A feed that learns from what people do with what it showed them learns little about what it never shows.

Few-shot promptingalso few-shot, in-context examples

Putting a few worked examples of a task in a language model's prompt, so it continues the pattern for a new case without any further training.

Filter bubblealso filter bubbles

The idea, popularized by Eli Pariser in 2011, that personalization shows people mainly what fits their past behavior and so isolates them from other views. How strong this effect is on real platforms is still debated.

Fine-tuningalso supervised fine-tuning, SFT

Continuing to train a pretrained model on a smaller, targeted dataset, such as example conversations, to change its behavior. Supervised fine-tuning uses examples of good responses.

Floating pointalso float32, float16, fp32, fp16, half precision

A way to store real numbers as a sign, an exponent that sets the scale, and a fraction that sets the precision. float32 and float16 are the common 32-bit and 16-bit IEEE 754 formats.

FLOPalso FLOPs, floating point operation, floating point operations, FLOP/s

A floating point operation, one multiplication or addition of numbers with fractional parts. Training and running models are measured in how many of these they take, and chips in how many they do per second (FLOP/s).

Flow matchingalso rectified flow, flow model

Training a network to predict the velocity that carries noise to data along chosen paths, then generating by following that velocity from noise. With straight paths it is also called rectified flow.

Flow matching (Lipman et al., 2022) and rectified flow (Liu et al., 2022) mix data and noise as xt=(1−t) x0+t εx_t = (1 - t)\, x_0 + t\, \varepsilon and train the network to predict ε−x0\varepsilon - x_0. The best possible prediction is a fixed combination of xtx_t and the score of the noisy data, so the model needs the same knowledge as a diffusion model. Stable Diffusion 3, FLUX.2, and Qwen-Image are trained this way.

Fourier transformalso FFT, fast Fourier transform, DFT, discrete Fourier transform

A way to rewrite a signal as a sum of sine waves, giving how much of each frequency it contains. Computers use the discrete version on a block of samples, computed quickly with the fast Fourier transform (FFT).

Gated recurrent unitalso GRU

A simpler gated recurrent network than the LSTM, with an update gate that blends the old hidden state with a new candidate and a reset gate. Introduced by Cho et al. in 2014.

Generalization

How well a model performs on new data it was not trained on. It is the goal of machine learning; doing well on the training data is only a means to it.

Generative AIalso GenAI

Models that produce new content, such as text, images, audio, or code, rather than only labeling or scoring existing content.

Gini impurityalso Gini index

A measure of how mixed the classes in a group are: the chance that two members drawn at random (with replacement) belong to different classes. 0 for a pure group, 0.5 for an even two-class mix.

G=1−∑kpk2G = 1 - \sum_k p_k^2, where pkp_k is the share of the group in class kk.

Goal misgeneralizationalso goal misgeneralisation

When a system keeps its skills in a new situation but pursues the wrong goal, one that matched the intended goal in training. It can happen even when the training reward was correct.

Goodhart's lawalso Goodhart

The observation, usually phrased as "when a measure becomes a target, it ceases to be a good measure": optimizing hard for a proxy breaks its link to the real goal.

GPUalso GPUs, graphics processing unit, graphics chip

A graphics processing unit, a chip that does thousands of simple calculations at once. Built for graphics, GPUs also suit the many multiplications inside neural networks, so most AI training and serving uses them or similar chips.

Gradient

The list of slopes of a function, one per parameter. It points in the direction in which the function increases fastest, so its opposite points downhill.

Gradient boostingalso gradient boosted trees, gradient boosting machine

A boosting method that adds small trees one at a time, each fitted to the negative gradient of the loss (for squared error, the residuals), scaled by a learning rate.

Gradient clipping

Rescaling the gradient whenever its size passes a threshold, so one unusually large gradient cannot throw training off course. A standard fix for exploding gradients.

Gradient descent

An optimization method that repeatedly moves the parameters a small step in the direction that lowers the loss fastest, the opposite of the gradient.

Greedy decoding

Generating text by always choosing the single most probable next token. Equivalent to sampling at temperature 0.

Group-wise quantizationalso per-group quantization, block-wise quantization, group size

Giving each group of consecutive values, such as 64 or 128 weights, its own quantization scale, so one large value only affects its own group.

Grouped-query attentionalso GQA, multi-query attention, MQA

An attention variant in which groups of query heads share one key head and one value head. It shrinks the KV cache with little loss in quality. Multi-query attention is the extreme case of a single shared key/value head.

Hallucinationalso confabulation

When a language model states something false or invented, such as a fake quote or citation, in the same fluent, confident style as true statements.

Hidden layer

A layer of neurons between a network's inputs and its output. Its values are not given or read directly; the network works them out as intermediate steps.

Hidden statealso hidden states

The vector a recurrent network carries from one step of a sequence to the next. It is the network's only memory of the inputs it has read so far.

Hyperparameter

A setting chosen by people rather than learned from data, such as the learning rate, the number of layers, or the strength of regularization.

Image segmentationalso segmentation, segmentation mask, mask

Deciding which pixels of a picture belong to which object or region, producing a mask for each, rather than a label for the whole picture or a box around each object.

Image tokenalso image tokens, visual tokens, image codes

A whole number standing for a small square of a picture: an index into an image tokenizer's codebook. A model can write image tokens one at a time, as a language model writes words, and a decoder turns them into pixels.

ImageNetalso ImageNet-1k, ILSVRC

A large collection of labeled photos organized by the WordNet hierarchy. Its best-known subset, 1.28 million training images in 1,000 categories, became the standard benchmark for image classification.

The 1,000 categories include more than 100 dog breeds and the moped, but no motorcycle and no general category for a person.

Implicit feedbackalso implicit signals

Signals of preference that people give without rating anything, such as clicks, plays, purchases, watch time, and skips. Plentiful but indirect; a missing click is not the same as a dislike.

In-context learningalso ICL

A model picking up a pattern from the text in its prompt, such as repeating a name or following an example, without any change to its weights.

Induction head

An attention head that, at a token A, looks back for earlier copies of A and attends to the token that followed them, helping the model continue repeated patterns.

Inferencealso serving, model serving

Running a trained model to get an output, as opposed to training it. Every prompt a chatbot answers is inference, and over a popular model's life it can use more energy than the training did.

Information gain

How much a question lowers the entropy of the class labels, averaging the resulting groups by size. Decision tree algorithms such as ID3 ask the question with the largest gain.

gain=H(parent)−∑cncnH(c)\text{gain} = H(\text{parent}) - \sum_c \frac{n_c}{n} H(c) over the child groups cc.

Instruction tuningalso instruction fine-tuning

Fine-tuning a pretrained model on many tasks written as instructions paired with good responses, so it learns to follow instructions it has not seen before.

Interpretabilityalso mechanistic interpretability

The study of how a trained model computes its outputs, by reading and intervening on its internal activations and weights.

Intersection over unionalso IoU, Jaccard index

How well two regions agree: the area they share divided by the area either one covers, from 0 (no overlap) to 1 (identical). Used to compare boxes in detection and masks in segmentation.

Jaccard similarityalso Jaccard index, Jaccard

The similarity of two sets, from 0 to 1, measured as the number of items they share divided by the number of items in either one.

Jailbreakalso jailbreaks, jailbreaking, jailbroken

A prompt written to get a model to do what its training or policy is meant to prevent, for example by role-play, odd encodings, or many fake example dialogues.

k-meansalso k-means clustering

A clustering method that places k centers, assigns every point to its nearest center, moves each center to the average of its points, and repeats until nothing changes.

k-nearest neighborsalso k-NN, KNN

A method that predicts the label of a new point by finding the k most similar labeled examples and taking a vote among them.

Kernel (convolution)also filter

The small grid of weights, often 3 x 3, that a convolution slides across an image. In a convolutional network the kernel values are learned.

Keypointalso keypoints, body keypoint, landmark, joint

A named landmark on a body or object, such as the left elbow or the nose, given as a point in the picture. The COCO dataset labels 17 for each person, from the nose to the ankles.

Keypoint heatmapalso heatmap, heatmaps, confidence map

A small grid a pose model outputs for each keypoint, with a high value wherever it thinks that keypoint is. It is trained to draw a bump centered on the true position, and the keypoint is read from the grid's peak.

KL divergencealso Kullback-Leibler divergence, KL, KL penalty

A measure of how much one probability distribution differs from another, in bits or nats. It is zero only when the two are identical. In RLHF a KL penalty keeps the trained model close to where it started.

DKL(p ∥ q)=∑ipilog⁡(pi/qi)D_{\mathrm{KL}}(p \,\|\, q) = \sum_i p_i \log (p_i / q_i), in bits with a base 2 logarithm or nats with the natural logarithm. It is not symmetric: comparing pp with qq and qq with pp can give different values.

Knowledge distillationalso distillation, teacher-student training, pseudo-labels

Training a smaller student model to reproduce a larger teacher model's outputs, so the student learns from the teacher's predictions instead of, or as well as, human labels.

KV cachealso key-value cache

Stored keys and values for every token already processed, kept between generation steps so each new token only needs its own keys and values computed. It grows with every token in the context.

Its size is 2×2 \times layers ×\times key/value heads ×\times head size ×\times bytes per number for each token.

Labelalso target

The answer a model should learn to give for an example, such as "apple" or "orange". Labeled examples are what supervised learning learns from.

Language model

A model that assigns probabilities to what comes next in a piece of text. Writing text with one means repeatedly predicting the next word or token and picking one.

Large language modelalso LLM

A neural network, usually a transformer with billions of parameters, trained on large amounts of text to predict the next token. Chatbots are built on them.

Latencyalso response time, time to first token, delay

The wait between a request and the response, such as the silence between the end of your question and the start of a voice assistant's answer. In a chain of models the waits add up.

People in conversation usually answer within a few hundred milliseconds: the Moshi paper cites an average gap of 230 ms across ten languages, measured by Stivers and colleagues (2009).

Latent spacealso latent, latent representation, latent vector

The space of learned, hidden coordinates a model uses to represent things internally, such as word vectors or a network's hidden layers. Nearby points stand for similar things.

Latent means hidden: present, but not directly observed. A model never stores the word “king” or a picture of a cat as such. It stores coordinates, and what they mean lives in where those points sit relative to one another. Word embeddings, the hidden layers of a neural network, and the compressed images that latent diffusion models such as Stable Diffusion work on (Rombach et al., 2022) are all latent spaces.

This site is named after the idea. Much of what makes modern AI work happens in spaces you cannot see directly, and the demos here are ways of looking into them.

Layeralso dense layer, fully connected layer

A group of neurons that all read the same inputs. A fully connected layer computes Wx + b for a weight matrix W and bias vector b, then applies an activation function.

Layer normalizationalso LayerNorm, RMSNorm, normalization

Rescaling each token's vector to a standard mean and spread, then applying a learned scale (and, in LayerNorm, a shift). Keeps every sublayer's input on a stable scale.

LayerNorm (Ba et al., 2016) subtracts the mean and divides by the standard deviation of the vector’s entries. RMSNorm (Zhang and Sennrich, 2019) only divides by the root mean square.

Learning ratealso step size

The step size in gradient descent. Too small and training crawls; too large and each step overshoots, so the loss can grow instead of shrink.

Least privilegealso principle of least privilege, least agency

Giving a program, person, or agent only the access its task needs, so a mistake or a takeover can do less harm. OWASP's agentic list extends the idea to autonomy as least agency.

Lethal trifectaalso Rule of Two

Simon Willison's name for an agent that can read private data and untrusted content and can send data out, so planted text can make it leak. Meta's Rule of Two builds on it: hold at most two, or have a person supervise.

Likelihood

How probable the observed evidence is if a hypothesis is true, P(evidence | hypothesis). Comparing it across hypotheses (the likelihood ratio) says how strongly the evidence favors one over another.

Linear regression

Predicting a number with a weighted sum of the inputs plus a constant. With one input, it is fitting a straight line.

Linear transformationalso linear map, affine transformation

A map that can only rotate, stretch, shear, or reflect space, so straight lines stay straight and parallel lines stay parallel. Adding a bias also shifts it (an affine map).

Local minimum

A point lower than everything around it but not necessarily the lowest point overall. Gradient descent can settle in one and stop improving.

Log-derivative trickalso score function estimator, likelihood ratio trick

The identity that the gradient of p(x) equals p(x) times the gradient of ln p(x). It turns the gradient of an expected reward into an expectation that can be estimated from samples.

Logistic regression

A classifier that computes a weighted sum of the inputs and passes it through the sigmoid to get the probability of the positive class. Despite the name, it is used for classification.

Logitalso logits

A raw, unnormalized score a model outputs for one option, such as one token in the vocabulary. Softmax turns a vector of logits into probabilities.

Logit lens

Reading a model's next-token guess at an earlier layer by applying its final norm and output layer to that layer's residual stream, as if the model stopped there.

Introduced by nostalgebraist in a 2020 LessWrong post on GPT-2. It is exact at the last layer and an approximation everywhere else, because earlier layers were never trained to be read this way. The tuned lens (Belrose et al., 2023) trains a small translator for each layer to read them more faithfully.

Long short-term memoryalso LSTM

A recurrent network whose memory cell is updated by adding gated new information to a gated copy of the old cell, so information and gradients can survive many steps. Introduced in 1997.

The cell update is ct=ft⊙ct−1+it⊙gtc_t = f_t \odot c_{t-1} + i_t \odot g_t, with forget, input, and output gates computed by sigmoid layers from the input and the previous hidden state. The forget gate was added in 2000.

Loss functionalso loss, cost function, objective

A formula that turns a model's mistakes on the training data into a single number. Lower is better, and training tries to make it as low as possible.

Loss of controlalso AI loss of control, losing control of AI

Hypothesized scenarios in which AI systems come to operate outside anyone's control, with regaining control extremely costly or impossible. Expert opinion on how likely such scenarios are varies greatly.

Lost in the middlealso lost-in-the-middle, position bias

The tendency of language models to use information at the start or end of a long input better than information in the middle, named by Liu and colleagues in 2023.

Low-rank adaptationalso LoRA, LoRA adapter

A way to fine-tune a model by freezing its weights and learning each change as the product of two thin matrices, B times A, of a small rank r. It trains a tiny fraction of the parameters.

The adapted layer computes W0x+αrBAxW_0 x + \frac{\alpha}{r} B A x. B starts at zero, so training starts at the pretrained model.

Machine learningalso ML

A way of building software where the behavior is learned from examples with known answers, instead of being written as rules by a person.

Markov decision processalso MDP

The standard model of a sequential decision problem: states, actions, transition probabilities for where each action leads, and rewards. What happens next depends only on the current state and action.

Matrix factorizationalso matrix factorisation, latent factor model, low-rank factorization

Learning a vector for every user and every item so that their dot product, plus offsets, predicts the known ratings. It fills in the empty cells of the user-by-item ratings table.

The prediction for user uu and item ii is r^ui=μ+bu+bi+pu⋅qi\hat{r}_{ui} = \mu + b_u + b_i + \mathbf{p}_u \cdot \mathbf{q}_i, fit by minimizing squared error on the known ratings plus an L2 penalty.

Matrix multiplicationalso matmul

Combining a matrix with a vector or another matrix by taking dot products of rows with columns. An (m x n) matrix times an n-vector gives an m-vector.

Mean absolute erroralso MAE

The average size of the differences between predictions and true values, ignoring sign. Less sensitive to a few wild outliers than mean squared error.

Mean poolingalso average pooling, pooling

Turning a model's per-token vectors into one vector for the whole text by averaging them, number by number. Many sentence embedding models, including all-MiniLM-L6-v2, work this way.

Padding tokens are left out of the average. Some models instead use one special token’s vector, or the last token’s, as the summary.

Mean squared erroralso MSE

The average of the squared differences between predictions and true values. Squaring makes big misses count much more than small ones.

Mel scalealso mel, mels, mel filterbank, mel bands

A pitch scale built from listening experiments, roughly linear below 1,000 Hz and logarithmic above, so equal steps in mels sound like equal steps in pitch. Speech models group frequencies into bands spaced evenly in mels.

Memorizationalso memorisation, memorized, training data extraction, regurgitation

When a model can reproduce passages of its training data word for word. It is much more likely for text the model saw many times, which is one reason training data is deduplicated.

Memory bandwidthalso memory speed

How many bytes a chip can read from its memory each second. A language model reads nearly all of its weights for every token it writes, so bandwidth divided by the model's size caps how fast it can write.

Memory poisoningalso context poisoning, memory and context poisoning

Getting false facts or instructions saved into an assistant's or agent's memory, so they are read back into later conversations, not just the current one.

MinHashalso min-hash, MinHash LSH, locality-sensitive hashing

A way to estimate how similar two sets are from short signatures: for each of many random hash functions, keep each set's smallest hash. The share of matching minimums estimates their Jaccard similarity.

Mixture of expertsalso MoE, sparse mixture of experts

An architecture with many alternative sub-networks (experts) and a router that runs only a few of them for each token, so a model can store many parameters while using few per token.

MNIST

A classic dataset of 70,000 handwritten digits, each a 28 x 28 grayscale image: 60,000 for training and 10,000 for testing.

Model

The rule a learning algorithm produces from data. Given an input, a model returns a prediction. In neural networks, the model is defined by its parameters.

Model cardalso model cards

A short document published with a model that describes what it is for, how it was trained and evaluated, and its known limits. It is the publisher's own account, not proof of where the weights came from.

Model Context Protocolalso MCP, MCP server

MCP, an open protocol from Anthropic (2024), now under the Linux Foundation, for connecting AI applications to outside tools and data. A server offers tools, resources, and prompts; the application decides what the model may use.

Model evaluationalso evals, evaluations, capability evaluation, safety evaluation, dangerous capability evaluation

Systematic tests of what a model can do and how it behaves, such as benchmarks, dangerous capability evaluations, and red teaming. Often shortened to evals.

Model FLOPs utilizationalso MFU, utilization, GPU utilization

The share of a chip's peak arithmetic rate that a run actually spends on the model's own operations. Meta reported 38 to 43 percent for the main training setups of Llama 3.1 405B.

Model licensealso model licenses, license, licence, Apache 2.0, MIT License, OpenRAIL, Llama license, CC BY-NC

The terms under which a model's weights may be used, changed, and shared, from permissive open source licenses such as Apache 2.0 to licenses with use restrictions, user limits, or a ban on commercial use.

Momentum

An optimizer that keeps a running sum of past gradients, like a ball gathering speed downhill, so it moves faster along consistent slopes and damps zig-zags.

Monocular depth estimationalso depth estimation, relative depth, inverse depth, depth map

Guessing how far away every pixel is from a single photo, using learned cues such as overlap, perspective, and familiar sizes. Most models give relative depth, an order with no units, rather than meters.

Multi-armed banditalso bandit, bandit problem

A problem where you repeatedly choose among several options (like slot machines) with unknown payouts, aiming to win as much as possible. The situation never changes between choices.

Multi-head attention

Running several attention heads in parallel, each with its own query, key, and value projections, then concatenating their outputs and mixing them with one more matrix.

Multi-label classificationalso multi-label, multilabel, multi-label classifier

Classification where one input can have several labels at once, such as a clip with both speech and music. Each label gets its own yes-or-no probability from a sigmoid, so the probabilities need not add up to 1.

The usual loss is binary cross-entropy on each label, summed or averaged over the labels. A softmax, by contrast, makes the labels compete for one total, which suits classes that exclude each other, like ImageNet’s.

Multimodal modelalso multimodal, multi-modal model, multimodality, any-to-any model, omni model, natively multimodal

A model that works with more than one kind of data, such as text, pictures, and sound. Some only read other kinds of data and answer in text; others can also produce pictures or speech.

“Natively multimodal” usually means trained on several kinds of data from the start, as Google describes Gemini, rather than a language model with an encoder attached afterward.

n-gram modelalso bigram, trigram, n-gram

A simple language model that predicts the next word by counting what followed the previous one or few words in its training text.

Naive Bayesalso naive Bayes classifier

A classifier that applies Bayes' rule assuming the features are independent once the class is known, so each word (or feature) adds its own evidence. Simple and fast, but its probabilities tend to be overconfident.

Needle in a haystackalso NIAH, needle test

A test that hides one fact at different depths in long filler text and asks the model to find it. Passing shows a model can locate a fact that matches the question; harder long-context tests often find much lower scores.

Neural networkalso network, neural net

A model built from layers of artificial neurons, where each layer's outputs become the next layer's inputs. Training adjusts all of the weights together.

Noise schedulealso variance schedule, beta schedule

How much noise a diffusion model's forward process adds at each step. DDPM's schedule raises the per-step noise variance beta from 0.0001 to 0.02 over 1,000 steps, which fixes how much of the image survives at every step.

The schedule decides which noise levels the model is trained on and which a sampler visits. DDPM used a linear schedule (Ho et al., 2020); later work proposed others, such as a cosine schedule that destroys a small image’s information more gradually (Nichol and Dhariwal, 2021).

Object detectionalso detector, bounding box, object detector

Finding every object of known kinds in an image and reporting each one as a box (its bounding box), a label, and a confidence score, instead of one label for the whole picture.

Detectors are usually trained on the COCO dataset’s 80 kinds of everyday objects, and can only report those.

Object keypoint similarityalso OKS

COCO's 0 to 1 score for how close a predicted pose is to a labeled one. It allows more error for larger people and for keypoints labelers place less consistently, such as hips. It plays the role IoU plays for boxes.

Occlusion mapalso occlusion sensitivity, occlusion heatmap

A map of how much a model's output changes when each region of its input is covered in turn, made by running the model once per covered region.

Off-policy learningalso on-policy, on-policy learning

Learning about one policy (often the best one) while behaving according to another (often an exploring one). Q-learning is off-policy; SARSA is on-policy, learning about the policy it follows.

On-device AIalso on-device, on-device model, local model, runs locally, edge AI

A model that runs on your own phone, laptop, or browser, so what you give it is processed there instead of being sent to a company's computers. Its files must be downloaded and fit in your device's memory.

Open source AIalso open-source AI, open source AI definition, OSAID, open source model

As the Open Source Initiative defines it (2024): an AI system anyone may use for any purpose, study, modify, and share, released with its parameters, its complete code, and enough information about its training data to rebuild it.

Open weightsalso open-weight model, open weight, open model, downloadable model, open-weights model

A model whose trained parameters are published for anyone to download, under a license that says what you may do with them. It does not mean the training data or code are published too.

Open-vocabulary detectionalso open-vocabulary object detection, text-conditioned detection, zero-shot object detection, OWL-ViT

Object detection where the kinds of object to find are given as text at run time, so the detector can box things named by any word or phrase rather than a fixed list of labels.

Optimizer

The rule that decides how to change a model's parameters at each training step, given the gradient. Gradient descent, momentum, and Adam are optimizers.

Out-of-bag erroralso out-of-bag estimate, OOB error

An estimate of a bagged ensemble's error on new data, computed by judging each training point only with the models whose bootstrap samples left it out. It needs no separate test set.

Outlier

A data point far from the pattern of the rest, from a rare event or a recording error. Some loss functions are pulled hard by outliers.

Overfitting

When a model fits the quirks and noise of its training data so closely that it does worse on new data. Training error keeps falling while test error rises.

OWASP Top 10also OWASP, OWASP Top 10 for LLM Applications, OWASP GenAI Security Project, Agentic Top 10

A ranked list of the most important security risks for one kind of software, published by OWASP, a nonprofit security community. Its GenAI Security Project keeps one list for LLM applications and one for agentic applications.

Parameteralso weight

A number inside a model that training adjusts, such as the slope of a line or a weight in a neural network. Large language models have billions of them.

pass@kalso pass at k, pass@1

The chance that at least one of k attempts at a problem is correct, averaged over problems. Usually estimated from n ≥ k samples with the unbiased formula 1 - C(n - c, k) / C(n, k).

Phase change

A sudden change in a model's behavior or training loss over a short stretch of training, often because a new mechanism has formed inside the model.

Picklealso pickle file, pickle files, unpickling, .pt file, .pkl, torch.load

Python's built-in format for saving objects. A pickle file can name functions to call while it loads, so opening an untrusted one can run code. PyTorch's own model files, written by torch.save, are built on it.

Pixel

One tiny square of a digital image. A grayscale pixel is stored as one brightness number; a color pixel as three (red, green, and blue).

Policyalso strategy

An agent's rule for choosing actions: for each state, which action to take, or the probability of taking each one.

Policy gradientalso policy gradient method

A family of methods that learn a policy directly, adjusting its parameters in the direction that increases expected return, estimated from sampled episodes.

Polysemantic neuronalso polysemanticity, polysemantic

A neuron that responds to several unrelated things, such as cat faces and the fronts of cars. Superposition is one proposed explanation for why such neurons are common.

Popularity biasalso rich get richer

The tendency of a recommender to show already-popular items more, because they have the most data and the surest scores, which makes them more popular still.

Pose estimationalso body pose estimation, human pose estimation, keypoint detection, body tracking, motion capture

Finding where a body's joints and other landmarks (keypoints such as the shoulders, elbows, knees, and ankles) are in a picture, usually drawn as a stick-figure skeleton.

Position encodingalso positional encoding, positional embedding, position embedding

Information about where each token sits in the sequence, given to a transformer because attention on its own ignores word order.

The original transformer added fixed sine and cosine waves to each token’s embedding. GPT-2 learned one vector per position. Many recent models use rotary embeddings (RoPE) instead.

Posterioralso posterior probability

What you should believe about a hypothesis after seeing the evidence, P(hypothesis | evidence), computed from the prior and the likelihood by Bayes' rule.

Power usage effectivenessalso PUE

A data center's total electricity divided by what its computers use. A value of 1.0 would mean no overhead for cooling and power conversion; Google reported a fleet average of 1.09 in 2025.

Precision

Of the items a classifier flagged as positive, the fraction that really are positive. High precision means few false alarms.

Pretrainingalso pre-training

The first and most expensive stage of training a language model, in which it learns to predict the next token across a very large amount of text. The result is a base model.

Previous-token head

An attention head that mostly looks at the position just before the current one, writing information about the previous token into each position.

Principal component analysisalso PCA

A method that finds the directions along which data varies the most, often used to project many-dimensional data down to two or three dimensions for viewing.

The principal components are the eigenvectors of the data’s covariance matrix; each eigenvalue is the variance along its component.

Prioralso prior probability

What you believe about a hypothesis before seeing the evidence, as a probability. Bayes' rule combines it with the likelihood to give the posterior.

Privilege separationalso dual LLM pattern, quarantined model

Splitting a system so the part that handles untrusted input cannot take privileged actions. In an AI app, one model reads untrusted text but has no tools, while the part that acts never reads that text (the dual LLM pattern).

Probability

A number from 0 to 1 saying how likely something is. One way to read it: out of many similar cases, the share in which it happens.

Projectoralso adaptor, adapter, connector, understanding adaptor, multimodal projector

In a vision-language model, the small network that maps each vector from the vision encoder into the language model's embedding space, so the language model can read picture pieces like word tokens. Also called an adaptor or connector.

LLaVA used a single linear layer; LLaVA-1.5 and Janus-Pro use a two-layer network. Janus-Pro’s maps SigLIP’s 1,024 numbers per patch to the language model’s 2,048.

Prompt cachingalso prompt cache, context caching

Keeping the processed start of a prompt, its keys and values, so later requests that begin with the same text skip that work. Providers charge less for cached tokens, but they still fill the context window.

Prompt injectionalso indirect prompt injection, direct prompt injection, prompt injections

An attack in which text a model reads changes what it does against its developer's intent. Direct injection comes from the person typing; indirect injection hides in what the model reads, such as a web page, email, picture, or memory.

Promptable segmentationalso Segment Anything, SAM, interactive segmentation

Segmentation guided by a prompt such as a click, a box, or a rough mask, so one model can outline whatever object the person points at, without a fixed list of classes. SAM is the best-known example.

Proximal policy optimizationalso PPO

A policy gradient algorithm that limits how far each update can move the policy, by clipping the change in action probabilities. Used for RLHF in InstructGPT.

Q-learning

A temporal difference method that learns action values from experience, updating toward the reward plus the discounted value of the best next action, whatever action the agent actually takes next.

Quantizationalso quantized, quantize, int8, 4-bit

Storing a model's numbers in fewer bits, for example as 8-bit or 4-bit integers with a scale, to save memory and speed up inference at some cost in accuracy.

Query, key, and valuealso queries, keys, values, Q K V

The three vectors attention makes from each token. A token's query is compared with other tokens' keys to decide how much of each of their values to take.

RAG poisoningalso knowledge base poisoning, knowledge corruption, retrieval poisoning

Planting text in a knowledge base that a retrieval-augmented system searches, written so it is retrieved for chosen questions and steers the answers.

Random forest

An ensemble of decision trees, each trained on a bootstrap sample and allowed to choose only among a random subset of features at every split, combined by majority vote.

Random seedalso seed

A number that sets where a computer's random number generator starts. The same seed gives the same "random" numbers every time, so a result that uses randomness can be repeated exactly.

Rank (of a matrix)also rank, low rank, low-rank

The number of independent directions a matrix can produce. A matrix of rank r can be written as a sum of r pieces, each one column times one row.

Reasoning modelalso reasoning models, thinking model, large reasoning model

A language model trained, often with rewards for answers that can be checked, to write long reasoning before it answers. More thinking often helps on hard problems, at the cost of more tokens, time, and energy.

Recallalso sensitivity, true positive rate

Of all the items that really are positive, the fraction the classifier flagged. High recall means few misses.

Receptive field

The part of the input image that can affect one output of a layer. One 3 × 3 convolution sees 3 × 3 pixels; stacking layers widens it, while self-attention reaches the whole image in one layer.

Recommender systemalso recommendation system, recommender, recommendation engine

Software that predicts how much each person will like, click, or watch each item, then shows each person the items with the highest predictions. Feeds, shops, and streaming apps run on them.

Reconstruction lossalso reconstruction error, reconstruction

How far an autoencoder's output is from its input, such as squared error or binary cross-entropy summed over the pixels. Training an autoencoder means making it small.

Recurrent neural networkalso RNN, recurrent network, Elman network, simple recurrent network

A network that reads a sequence one step at a time, applying the same weights at every step and passing a hidden state from each step to the next.

The basic update is ht=tanh⁡(Wht−1+Uxt+b)h_t = \tanh(W h_{t-1} + U x_t + b). Transformers replaced recurrent networks for most language tasks because attention lets every position of a training sequence be computed in parallel.

Red teamingalso red team, red-team attacks

Deliberately trying to make a model behave badly, by people or by other models, to find failures before users do.

Refusalalso over-refusal, refusals, exaggerated safety, refuse

When a model declines a request, usually because it was trained to refuse requests that break its policy. Over-refusal is declining harmless requests that only look like harmful ones.

Regression

A prediction task where the answer is a number, such as a price, a temperature, or a time.

Regret

The total reward given up by not always choosing the best option: summed over every choice, the best option's expected payout minus the chosen option's.

Regularizationalso L2 regularization, weight decay, ridge

Any technique that discourages a model from fitting noise, for example adding a penalty on large parameter values to the loss.

REINFORCE

The basic policy gradient algorithm (Williams, 1992): after an episode, make each action taken more likely in proportion to the return that followed it, minus a baseline.

Reinforcement learningalso RL

Learning to act by trial and error: an agent takes actions, receives rewards, and adjusts its behavior to collect more reward over time, with no answer key telling it the right action.

ReLUalso rectified linear unit

The rectified linear unit, max(0, z): it passes positive inputs through unchanged and turns negative inputs into zero. The most common activation in deep networks.

Residual streamalso residual connection, skip connection

The running vector for each token that flows through a transformer from the embedding to the output. Every attention and MLP sublayer reads from it and adds its result back.

A residual connection computes x+f(x)x + f(x) instead of f(x)f(x). The name “residual stream” for the sum that accumulates through a transformer was popularized by Elhage et al. (2021).

Retrieval-augmented generationalso RAG

A technique that searches a collection of documents for passages relevant to a question and adds them to a language model's prompt, so it can answer from that text.

Returnalso discounted return, cumulative reward

The total reward an agent collects from some point on, usually with later rewards discounted: G = r1 + γ r2 + γ² r3 + ...

Rewardalso reward signal

A number an agent receives after acting that says how well things went. The agent's goal is to collect as much reward as possible over time.

Reward hackingalso reward gaming, reward model overoptimization

When an agent finds a way to score highly on its reward that does not achieve what the designers intended, by exploiting flaws in the reward or reward model.

Reward modelalso preference model

A model trained to predict which of two responses people prefer, used to score a language model's outputs during reinforcement learning. It is a learned stand-in for human judgment, and can be wrong.

RLHFalso reinforcement learning from human feedback

Reinforcement learning from human feedback. People compare pairs of model responses, a reward model learns to predict their preferences, and the language model is then trained with reinforcement learning to score well on it.

robots.txtalso robots exclusion protocol, robots file

A file on a website that tells named crawlers which pages they may visit. Site owners use it to opt out of crawlers that collect AI training data; it is a request, not a technical barrier.

ROC curvealso AUC, area under the curve

A plot of the true positive rate against the false positive rate as a classifier's threshold sweeps from strict to lenient. The area under it (AUC) summarizes how well the scores rank positives above negatives.

Rotary position embeddingalso RoPE, rotary embedding

A way to encode position by rotating each pair of query and key dimensions by an angle proportional to the token's position, so attention scores depend on position only through the offset between tokens.

Routeralso gating network, gate

The small learned layer in a mixture-of-experts model that scores every expert for each token and picks which few experts will process it.

Saddle point

A flat point that curves up in some directions and down in others, like the middle of a horse saddle. The gradient is zero there, but it is not a minimum.

Safetensorsalso safetensors file, .safetensors

A file format for model weights: a short JSON header listing each tensor's name, number type, shape, and position, followed by the raw numbers. Loading it reads data and runs no code from the file.

Safety classifieralso guardrail, guardrails, input filter, output filter, content filter, moderation model

A separate model that checks what goes into or comes out of a language model against a policy, and blocks or flags what breaks it. Like any classifier, it makes errors both ways.

Saliency mapalso attribution map, gradient map

A heatmap over a model's input showing which parts most affect one output, usually computed from gradients of that output with respect to the input.

Sampling ratealso sample rate, samples per second

How many times per second a recording measures the sound wave. CD audio uses 44,100 samples per second; Whisper works at 16,000. A rate can only capture frequencies below half of it.

Sandboxalso sandboxing, sandboxed

A boundary, enforced by the operating system or a separate machine, that limits what a program can reach, such as which files it can write and which network hosts it can contact, whatever the program intends.

SARSA

A temporal difference method like Q-learning, except it updates toward the value of the action the agent will actually take next, exploration included. Named for state, action, reward, state, action.

Scalable oversightalso AI safety via debate, AI debate

Methods meant to help people supervise AI systems on tasks too hard for them to judge directly, for example by having two models debate while a person judges, or having models critique other models' answers.

Scaling lawsalso scaling law, Chinchilla scaling

Fitted curves that predict how a model's loss falls as parameters, training data, or compute grow. They are empirical, and their constants depend on the architecture, data, and training recipe.

Scorealso score function

The gradient of the log of a probability density, which points in the direction where data becomes more likely. Diffusion models learn the score of noisy data at every noise level.

Self-attention

Attention in which the queries, keys, and values all come from the same sequence, so every token can draw information from every other token in it.

Self-consistencyalso majority voting

Sampling several reasoning paths for the same question and returning the most common final answer. It helps when the correct answer is the model's most likely answer.

Semantic searchalso vector search, embedding search

Search that ranks documents by how similar their meaning is to the query, usually by comparing sentence embeddings with cosine similarity.

Sentence embeddingalso text embedding

A single vector representing a whole sentence or passage, produced by a model trained so that texts with similar meaning get similar vectors.

Shared expertalso shared experts

In a mixture-of-experts layer, an expert that runs for every token alongside the few the router picks, meant to hold what all tokens need so the routed experts can specialize.

DeepSeekMoE (Dai et al., 2024) argued for setting shared experts apart so that the routed experts could specialize. DeepSeek-V3, Kimi K2, and Qwen3.5 each have one shared expert in every mixture-of-experts layer; Qwen3 has none.

Shinglealso shingles, n-gram shingle, word n-gram

A short run of consecutive words, for example every 5-word sequence in a page. Comparing the sets of shingles two pages share is how near copies are found.

Shortcut learningalso shortcut, Clever Hans effect, spurious correlation

When a model learns a rule that scores well on its test data because of a quirk of that data, such as a watermark on one class, and fails once the quirk is gone.

Sigmoidalso logistic function

The S-shaped function 1 / (1 + e^-z), which squashes any number into the range 0 to 1 so it can be read as a probability.

Singular value decompositionalso SVD, singular values, singular value

Writing a matrix as a sum of rank-one pieces, each with a weight called a singular value, largest first. Keeping the largest r pieces gives the best rank-r approximation.

Smoothingalso Laplace smoothing, additive smoothing, add-one smoothing

Adding a small count to every possible word or value before turning counts into probabilities, so nothing unseen gets probability zero. Adding exactly 1 is called Laplace smoothing.

Softmax

A function that turns a list of real-valued scores into probabilities that are positive and sum to 1, by exponentiating each score and dividing by the total.

softmax(z)i=ezi/∑jezj\mathrm{softmax}(z)_i = e^{z_i} / \sum_j e^{z_j}. Adding the same constant to every score leaves the result unchanged.

Sparse autoencoderalso SAE, dictionary learning, sparse autoencoders

A network trained to rebuild a model's activations from a much larger set of features, only a few active at a time. Used to pull apart features stored in superposition; a form of dictionary learning.

Special tokenalso special tokens, control token, end-of-turn token, end token

A token reserved for structure rather than words, such as one marking the end of a text or the start and end of a chat message. When a chat model writes its end-of-turn token, the app stops generating.

Specification gaming

Behavior that satisfies the literal specification of an objective without achieving the intended outcome, such as racing in circles to collect points instead of finishing the race.

Spectrogramalso short-time Fourier transform, STFT, log-mel spectrogram

A picture of sound with time across, frequency up, and loudness as color, made by taking the frequencies of many short, overlapping windows of the recording and placing them side by side.

Speech recognitionalso automatic speech recognition, ASR, speech to text, transcription

Turning recorded speech into text. Modern systems such as Whisper are neural networks that read a spectrogram of the audio and write the transcript one token at a time.

Steering vectoralso activation addition

A direction added to a model's residual stream while it runs, usually the difference between its average activations on two contrasting sets of prompts, used to push its output one way.

Stochastic gradient descentalso SGD, mini-batch gradient descent

Gradient descent where each step uses a small random batch of training examples instead of all of them. Steps are noisier but far cheaper, which is how large models are trained.

Subagentalso subagents, sub-agent

A separate agent run that a main agent starts for a side task. It works in its own context window and hands back only a short result, which keeps the main conversation small.

Superposition

When a network represents more features than it has dimensions by giving them overlapping directions. It works when features are rarely active together, at the cost of some interference.

Supervised learning

Learning from examples that come with the right answer attached, such as photos labeled "cat" or houses with their sale prices.

SWE-benchalso SWE-bench Verified, SWE bench

A benchmark of real GitHub issues from 12 Python projects. A system gets the code and the issue and must write a change; it counts as solved if the tests for the fix pass and the other tests still pass.

Sycophancyalso sycophantic, flattery, AI flattery

A model telling people what they want to hear, such as agreeing with a wrong claim or praising weak work. Training on human approval can encourage it.

Synthetic dataalso synthetic text, model-generated data, generated training data

Training data generated by a model or a program instead of collected from people, such as textbook-style exercises written by a language model.

System promptalso system message, system instructions

Instructions an application places at the start of a language model's context, before the user's messages, to set its role, rules, and how it should use tools. The model reads them as text; nothing forces it to obey.

Tanh

The hyperbolic tangent, an S-shaped activation function that squashes any number into the range from -1 to 1. It is a rescaled sigmoid centered on zero.

Temperature

A setting for how adventurous a model's choices are. Low temperature sticks to the likeliest options; high temperature spreads choices toward less likely ones. Technically, it divides the logits before softmax.

Temporal difference learningalso TD learning, TD error

Learning a value estimate from the next step's reward plus the estimate at the next state, instead of waiting for the final outcome. The gap between the two is the TD error.

Test setalso test data, held-out data

Examples held back from training and used only to measure how well a model does on data it has never seen.

Test-time computealso inference-time compute

Computation a model spends while answering, rather than during training, such as writing out reasoning, sampling several answers, or searching over candidates. More of it often improves accuracy on hard problems.

Text to speechalso TTS, speech synthesis

Turning written text into spoken audio. Neural systems predict an intermediate representation of the sound, such as a spectrogram or a learned code, and a decoder or vocoder turns it into a waveform.

Text-to-image modelalso image generator, AI image generator, text to image

A generative model that makes a picture from a written description, called a prompt. Many, such as Stable Diffusion, are diffusion models guided by the text; others build the picture piece by piece, the way a chatbot writes.

Thompson samplingalso posterior sampling, probability matching

An exploration strategy that keeps a probability distribution over each option's payout, draws one plausible value from each, and picks the option with the highest draw.

Time horizonalso task time horizon, 50% time horizon

METR's measure of what an AI agent can do: the length of task, in the time a skilled person needs for it, that the agent completes with 50% success. It depends on the tasks chosen and how long people take.

Token

The unit of text a language model reads and writes. A token can be a whole word, part of a word, a single character, or punctuation, often including a leading space.

Tokenizer

The program that splits text into tokens and maps each one to an id in a vocabulary, and turns ids back into text.

Tool usealso function calling, tool calling

Letting a language model request actions from external programs, such as searches, calculations, or API calls. The model outputs a structured call; the application runs it and returns the result.

Top-down pose estimationalso top-down, top down

Finding body poses in two steps. A detector first draws a box around each person, then a pose model finds the keypoints of the one person in each box. Its cost grows with the number of people.

Top-k samplingalso top-k

Sampling the next token from only the k most probable tokens, after setting all others to zero probability and renormalizing.

Top-p samplingalso nucleus sampling, top-p

Sampling the next token from the smallest set of most probable tokens whose probabilities add up to at least p. Also called nucleus sampling.

Training cutoffalso knowledge cutoff, training data cutoff, data cutoff

The date after which a model's training data contains nothing. The model cannot know later events unless an app puts them in its context, and it has no clock: today's date has to come from the app too.

Some providers give two dates: Anthropic lists a “reliable knowledge cutoff”, the date through which a model’s knowledge is most extensive and reliable, and a broader “training data cutoff”.

Training dataalso training set

The examples, usually with known answers, that a model learns from. A model can only learn patterns that are present in its training data.

Transformer

A neural network architecture built from stacked layers of attention and feed-forward networks, introduced by Vaswani et al. in 2017. Most modern language models are transformers.

U-Netalso UNet

A convolutional network shaped like a U: it shrinks an image into coarse, many-channel feature maps, then grows it back to full size, with skip connections carrying fine detail across. Many image diffusion models use one to predict noise.

The design comes from medical image segmentation (Ronneberger, Fischer, and Brox, 2015), where every output pixel needs both local detail and the context of the whole image. The shrinking half sees the big picture; the growing half puts the answer back at the original resolution; the skip connections pass each resolution’s features straight across so detail is not lost on the way down.

DDPM (Ho et al., 2020) used a U-Net to predict noise, and so did Stable Diffusion v1. Newer image generators often replace it with a transformer that works on patches.

Underfitting

When a model is too simple to capture the real pattern, so it does poorly on both the training data and new data.

Unsupervised learning

Learning from examples that have no answers attached, by finding structure such as groups or directions of variation in the data itself.

Upper confidence boundalso UCB, UCB1

An exploration strategy that scores each option by its average reward plus a bonus that is large for rarely tried options, then picks the highest score: optimism about what is uncertain.

Validation setalso validation data, dev set

A second held-back set used while building a model to choose settings such as the learning rate or model size, so the test set stays untouched until the final check.

Value functionalso state value, value

The return an agent can expect from a state (or from a state and an action) when it follows a given policy from then on. Values let an agent compare choices whose payoff comes later.

Value iteration

A planning method that starts with all values at zero and repeatedly updates every state with the Bellman equation until the values stop changing. Needs a known model of the world.

Vanishing gradientalso vanishing gradients, vanishing gradient problem

A gradient that shrinks toward zero as it is passed back through many steps or layers, because it is multiplied by many factors smaller than 1. Early steps then barely learn.

Variational autoencoderalso VAE, VAEs, variational autoencoders

An autoencoder whose encoder outputs a probability distribution instead of a single code, trained with a KL term that pulls codes toward a standard normal prior, so any point near the center decodes to something plausible.

Introduced by Kingma and Welling (“Auto-Encoding Variational Bayes”, 2013) and, independently, by Rezende, Mohamed, and Wierstra (2014). The loss is a reconstruction term plus the KL divergence from the encoder’s distribution to the prior; its negative is the evidence lower bound (ELBO). The reparameterization trick, z=μ+σεz = \mu + \sigma \varepsilon with ε\varepsilon drawn from a standard normal, lets gradients flow through the sampling step. The autoencoders in latent diffusion models such as Stable Diffusion use a light version of the same KL penalty.

Vector

An ordered list of numbers. It can also be read as an arrow, or a point, in a space with one dimension per number.

Vector arithmeticalso embedding arithmetic, analogy arithmetic

Adding, subtracting, and scaling embeddings, as in king - man + woman, to test whether a relationship between meanings shows up as a consistent direction.

A fair test compares the result with the nearest neighbors of the first vector alone; often the expected answer was already one of them.

Vector database

A database built to store embeddings and quickly find the ones most similar to a query vector, usually with an approximate nearest neighbor index.

Vector quantizationalso VQ, codebook, VQ tokenizer, VQ-VAE, VQGAN

Replacing each vector by the nearest entry in a learned list (a codebook), so it can be stored or predicted as one whole number. Image tokenizers use it to turn each small square of a picture into one code.

Van den Oord and colleagues (2017) trained an autoencoder whose middle layer is quantized this way (VQ-VAE). Janus-Pro uses the image tokenizer from LlamaGen (Sun and colleagues, 2024): 16,384 codebook entries of 8 numbers each, one code per 16 by 16 pixel square. Not to be confused with quantizing a model’s weights to fewer bits.

Verifiable rewardsalso RLVR, reinforcement learning with verifiable rewards

Rewards computed by an automatic check instead of a learned reward model, such as whether a math answer matches the known answer or whether code passes its tests.

Vision encoderalso image encoder, vision tower, SigLIP

The part of a multimodal model that turns a picture into a sequence of vectors, usually a vision transformer giving one vector per square patch. Janus-Pro's SigLIP encoder gives 576 vectors for a 384 by 384 picture.

Encoders trained contrastively on pictures and captions, such as CLIP and SigLIP, are common choices because their vectors already describe what a picture means rather than its exact pixels.

Vision transformeralso ViT, patch embedding

A transformer that reads an image by cutting it into square patches, turning each patch into a token vector, and attending across all the patches at once. Often shortened to ViT.

Introduced by Dosovitskiy and colleagues at Google in 2020. A 224 × 224 image in 16 × 16 patches becomes 196 tokens, plus a learned classification token.

Vision-language modelalso vision language model, VLM, VLMs, large multimodal model, LMM

A language model that also reads pictures: a vision encoder turns the picture into vectors, a small projector maps them into the language model's input space, and the model reads them alongside the text to answer in words.

LLaVA (Liu and colleagues, 2023) made the recipe widely known: a CLIP image encoder, one linear layer, and a language model fine-tuned on instructions about pictures. Janus-Pro, in this site’s lab, uses SigLIP and a two-layer network.

Vocabularyalso vocab

The fixed list of tokens a tokenizer and model know. Each token's position in the list is its id.

Vocoderalso neural vocoder

The part of a speech system that turns a compact description of sound, such as a mel spectrogram or a learned code, into an audio waveform, filling in detail the description leaves out, such as phase.

Watermarkalso AI watermark, watermarking, text watermark, SynthID

A signal a model hides in what it generates, such as a statistical preference for certain words or a pattern in pixels, that a detector with the right key can test for later.

Weight

A number that sets how much one input matters to a neuron, and in which direction. Positive weights push the output up, negative weights push it down.

Word error ratealso WER

The standard score for speech recognition. Count the fewest word substitutions, deletions, and insertions that turn the transcript into the correct text, and divide by the number of correct words. Lower is better.

Zero-point quantizationalso zero-point, asymmetric quantization

Quantization that maps a block's actual range, from its minimum to its maximum, onto the integers, with an integer offset marking where zero lands. Suits values that are not centered on zero.

Zero-shotalso zero-shot learning, zero-shot classification

Doing a task without any examples of that specific task during training or in the prompt, for example classifying images into categories the model was never trained to label.

Try "embedding", "softmax", "overfitting", or "backpropagation".