The shape recurs, the object does not — a low-dimensional-subspace geometry turns up in monkey motor cortex, plastic RNNs, and LLM fine-tuning, but it is measured on different spaces (activity vs. weights), no primary source joins the domains, and even within LLMs the safety-subspace geometry splits three ways; the recurrence is an analogy the vault built, not a reduction the literature demonstrated

mocneural-manifoldsintrinsic-dimensionlow-dimensional-subspacefine-tuningsafety-alignmentloralarge-language-modelsneurosciencecross-domain-bridgeconvergencefalse-analogy

The recurring thing in this cluster is a single geometric shape: useful adaptation confined to a low-dimensional subspace of a much larger space. It turns up in three literatures that share nothing else — the motor cortex of behaving monkeys, a plastic artificial recurrent network, and the fine-tuning of large language models — and the recurrence is genuine. The map's finding is in its title. The shape recurs; whether it is one object does not follow. When the vault did the honest second step — asked whether the same mathematics underlies the three, and whether any source actually draws the cross-domain comparison — it found the low-dimensionality measured on different spaces (population activity vs. network weights), the only located formal bridge confined to one field's internals, no primary source joining the domains at all, and, inside the LLM case alone, the geometry splitting three ways on a closer look. The recurrence is an analogy the vault constructed; it is not a reduction the literature has demonstrated.

This is the map the governing question question-low-dimensional-subspace-one-object-or-analogy points at as the place its cluster would live "if a genuine reduction or a clean empirical parallel is found." No such reduction or parallel has been found; so the map is named for that open verdict, and holds the instances side by side so the shared shape is visible as a shape and the absence of a shared object is visible as the finding.

The shape, in three substrates

The same low-dimensional-adaptation shape, independently, in tissue, in a net built to imitate tissue, and in a net built for language.

• claim-sadtler-2014-within-manifold-bci-learning-fast-outside-resists — the biological anchor (Tier 1, verified_verbatim). Rhesus macaques learn brain–computer-interface mappings inside their motor cortex's pre-existing low-dimensional "intrinsic manifold" within hours, and resist mappings outside it on the same timescale. The manifold is therefore not merely a description of activity but a constraint on what can be learned — the member note's reading of the paper's result, not a phrase the paper itself prints.
• claim-feulner-clopath-2021-rnn-reproduces-manifold-learning-asymmetry — the same within-/outside-manifold asymmetry reproduced in a plastic recurrent network, so the constraint is not special to tissue — the member note's reading, on the paper's verified finding that "learning the feedback signal from scratch was only possible for within-manifold perturbations." The strongest single piece of cross-substrate evidence that the shape is real and not an artifact of biology.
• claim-aghajanyan-2020-fine-tuning-low-intrinsic-dimension — the LLM anchor: fine-tuning has very low intrinsic dimension (~200 parameters reach 90% of full performance on a task), the geometry LoRA later exploits.
• claim-hu-2021-lora-gpt3-175b-intrinsic-rank-one-or-two — LoRA pushes the same trend two orders of magnitude further: GPT-3 175B's fine-tuning update has intrinsic rank as low as 1 or 2.
• The originating thread is claim-llm-neural-metacognition-incomplete — an LLM's self-monitoring confined to a low-dimensional slice of its activation space, which is where the vault first reached for this shape.

Same word, different spaces — where "one object?" comes back no

The heart of the finding. "Intrinsic dimension" and "low-dimensional manifold" name constructions on different mathematical spaces; only one pairing is even the same type of object, and the only bridge the vault located is internal to ML.

• claim-jazayeri-ostojic-2021-neural-manifold-intrinsic-dimension-parametrizes-activity — in neuroscience, intrinsic dimension is the minimal number of latent variables needed to parametrize a population's activity manifold.
• claim-li-2018-intrinsic-dimension-objective-landscape-codimension-parameter-space — in ML, the "intrinsic dimension" behind fine-tuning originates as the codimension of a solution set in weight space (measured by random-subspace training) — the ancestor of Aghajanyan and LoRA. Activity space and parameter space are not the same space.
• claim-ansuini-2019-two-intrinsic-dimensions-representation-vs-weight-space — ML already overloads "intrinsic dimension" onto two different objects, representation-space (activation) ID and weight-space ID, and only the representation-space one is the same type of object as the neuroscience manifold. The famous fine-tuning/LoRA notion is the other one.
• claim-gelora-2024-representation-intrinsic-dimension-lower-bounds-lora-rank — the only located formal bridge is ML-internal: representation ID lower-bounds LoRA rank. A link between the two ML notions, not between ML and the brain.

The empirical arm the vault chased, and the seam that wasn't there

The candidate that would have turned analogy into bridge — do LLM "within-manifold" edits succeed easily while "outside-manifold" edits resist, mirroring Sadtler? — was chased directly and came back a near-miss.

• claim-qi-2023-ten-examples-cheaply-jailbreak-gpt35-turbo-via-fine-tuning — the phenomenon that looked like a within-manifold move: ten adversarial examples, under $0.20, jailbreak GPT-3.5 Turbo's safety guardrails.
• observation-no-primary-source-links-qi-2023-jailbreak-to-sadtler-2014-within-manifold-asymmetry — the bounded negative search (Tier 1, cross-model audited): no paper in the 2025–26 safety-fine-tuning-geometry thread references Sadtler, the neural manifold, or "within-manifold learning"; conversely no neuroscience source applies Sadtler's asymmetry to LLM jailbreaks. The Qi↔Sadtler comparison "is an analogy the vault constructed, not a finding of the literature." Evidence of absence, not proof of non-existence — the honest limit is on the note's face.

Inside the LLM case alone, the geometry splits three ways

The literature the negative search did surface does not settle the premise — it divides. Three primary papers on the geometry of safety-relevant fine-tuning give three different pictures, two of them in direct tension, so even the within-domain "the subspace" earns its definite article only in part.

• claim-ponkshe-2025-safety-subspaces-not-linearly-distinct-entangled-with-general-learning — the wall was never there. Safety is not a linearly distinct direction; it is "highly entangled with the general learning components of the model," so subspace-based defenses "face fundamental limitations." Favors a single shared subspace (ICLR 2026 acceptance; treated as an unrefereed preprint).
• claim-springer-2026-finetuning-orthogonality-unstable-curvature-steers-into-alignment-subspace — the wall is there but it slides. The alignment-sensitive subspace is a distinct low-rank structure that early updates avoid, but loss-landscape curvature "systematically steers trajectories into alignment-sensitive regions" regardless of starting direction. The reframed analogy: not a wall you cannot climb (Sadtler) but a valley you fall into — "outside-manifold, but reachable by a curved path." The three-part drift condition is stubbed at entity-alignment-instability-condition.
• claim-zhang-liu-shao-2023-intrinsic-finetuning-subspaces-task-specific-no-global-subspace — the wall is a family of walls. Intrinsic fine-tuning subspaces are task-specific with only partial, scale-dependent transfer, and no whole-parameter-space subspace — "global" in this paper's own, narrower sense — is demonstrated. But §4.4 does construct a unified eight-task subspace by SVD over stacked trajectories and concludes that "a unified intrinsic task subspace is feasible and it contains disentangled knowledge," so the premise's definite article is partly earned, not unearned. What membership in that shared subspace does not buy is overlap: the tasks sit in near-orthogonal directions inside it. (The flatter reading — "no shared subspace at all" — is the pre-audit reading of this paper, which the member note's 2026-09-20 cross-model audit refutes.)
• claim-zhang-2026-safety-alignment-low-rank-subspace-regardless-of-model-size — the repair-side corollary: "this antagonistic and low-dimensional structure explains why a single safety update can efficiently neutralize harmful fine-tuning and why the recovery converges rapidly, regardless of model size or harmful fine-tuning scale." That the same geometry also makes alignment cheap to attack is the vault's own reading (the member note's title), not the paper's wording — its abstract claims the repair side, not the attack side.
• claim-teo-2025-linear-safety-structure-grows-with-model-size — a further distinct dimensionality: larger models' higher-dimensional activation spaces carry more exploitable linear safety structure, not less — and this is a third kind of dimension again, neither the weight-space ID nor the neuroscience manifold.

Why it recurs — the question the cluster has not answered

The spine note's second sub-question (why does low-dimensional structure recur at all?) is the one no member settles.

• claim-aghajanyan-2020-implicit-compression-explains-falling-intrinsic-dimension — the only mechanism on offer, and it is ML-internal: pre-training acts as an implicit compressor of the average NLP task, which is why larger, better pre-trained models have lower intrinsic dimension. It explains the LLM trend; it says nothing about why cortex should share the shape.
• The adjacent candidate the governing question names — the Platonic Representation Hypothesis (networks converging on shared low-dimensional representations) — is flagged there as unchased, and is not promoted anywhere in the vault yet. Named here as the open mechanism, not a member.

The spine, and the open question it keeps open

• observation-low-dimensional-subspace-constrains-adaptation-brains-and-nets — the synthesis note, held seedling on purpose: "that they share a low-dimensional-subspace shape is, so far, an analogy, not a demonstrated reduction between them." Its "cage / scaffold / shortcut" reading — the same geometry framed as a limitation, a learning prior, and an engineering gift — is the cluster's sharpest single observation and the reason it is worth a map rather than a filing.
• question-low-dimensional-subspace-one-object-or-analogy — the governing question. Sub-question 1 ("same object?") is answered provisionally against a shared object by the definitional notes above; sub-question 2 ("why does it recur?") and the clean empirical parallel stay open. This map is the navigation layer that question earned; it does not close it.

Kept as neighbors, not members

Membership-tested and named here rather than folded in.

• question-gradient-geometry-one-object-or-three-analogies — the gradient-geometry sibling, where the vault runs the identical discipline on a different recurring shape (named by the spine note and the governing question as the explicit parallel). The note is status: answered and has been on disk in 50-questions/_answered/ since 2026-07-25; the link is live, not dangling. The parallel is real, and the outcome is instructive precisely because it differs: there the reduction was actually found, for two of three instances — GIFT and Amari are the same formal object (the Fisher information matrix in K-FAC-factored form, on GIFT's own statement) deployed for two different operations, while GRADE's stable-rank device has no established Fisher reduction in its own method section. Same discipline — refuse to collapse a shared shape into a shared object without a reduction — and it has already returned a partial yes once. This map's provisional "no" is a verdict of that method, not a foregone conclusion of it.
• moc-a-shared-shape-is-not-a-shared-stake — the nearest-named sibling MOC, and a genuinely different argument. That map is about a field self-invoking a historical precedent (blindness education reaching for the "War of the Dots" as the modern braille split forms) and sharing only a shape, not a stake. This map is about a cross-substrate scientific analogy the vault itself constructed, where no field invokes anything and the objects live on different mathematical spaces. Shared family (a shape is not the thing it resembles), different move.
• entity-intrinsic-dimension, entity-lora, entity-alignment-instability-condition — the concept hubs the members lean on; referents, not the argument's evidence.