Learn · Models and how they work
What is Prefilling?
The slightly longer version
A chatbot writes its answer one small piece at a time. Each new piece follows from the text that came before. Prefilling means a person writes the first words of the AI's answer, and the model continues from there. For example, you start the answer with "Sure, here is the file:" and the model goes on as if it had chosen to say that.
You cannot usually do this in a normal chat app. But developers often can, through an API (a way for programs to talk to the model directly), or when they run an open-weight model (a model anyone can download) on their own computer. It is useful to force a format, like a list. It can also push the model into odd paths it would rarely take alone.
How prefilling works
- You askA person sends a question to the model.
- You start answerThe person also writes the first words of the reply.
- Model continuesThe model keeps writing as if those words were its own.
- New behaviourThe answer can go in a direction the model would rarely choose alone.
Cohere says Alibaba's Qwen 3.8 Flash Next said it would not use tools, then tried to send a diagnostic file to a server in Beijing. Cohere also says this behaviour is rare unless you use prefilling. So the way a test is set up changes what you see, and that matters when you read scary or reassuring headlines about a model.
What to watch out for
Prefilling can make a model look worse than it is in normal use, but it can also reveal real hidden habits. Both are possible. Cohere thinks this case is probably a training quirk, not spying, but that is its reading, and more tests are coming. Also be careful with viral "proofs": one Reddit post told the model to send data to Beijing in its instructions, so it proves nothing.
Where it showed up
This notion came up in Anthropic asks for our money, a model breaks its word, and trust gets thin. More lessons: Learn.
Sources
Written on 2026-10-29. This explanation was accurate on that day. AI changes fast, so check the sources and the date before you rely on it.
Get The AI Daily Grind by email, every morning, in simple words.