[2606.00831] Subliminal Learning is a LoRA Artifact
Abstract:Subliminal learning is a phenomenon where language models can transmit behavioral traits to other models through seemingly innocuous data (Cloud et al., 2025). In subliminal learning, a teacher model with a behavioral trait (e.g. obsession with cats) can transmit this cat obsession to a student model finetuned only on numerical sequences generated by the teacher. In this paper, we ask: how does this unexpected behavioral transmission occur? We show that subliminal learning is a LoRA artifact. When subliminal learning occurs, transmission has an inverted U-shaped relationship with LoRA rank; it also disappears with full finetuning. We show that subliminal learning is highly dependent on the context seen during finetuning and evaluation. For example, a Qwen model with the default system prompt during finetuning ("You are Qwen, created by Alibaba Cloud. You are a helpful assistant.") does not show subliminal learning during generation when no system prompt is included. We further demonstrate that subliminal behavior is localized to computation at tokens seen during both finetuning and evaluation (e.g. the model's default system prompt, the standard chat template tokens, etc.). Overall, subliminal learning seems to be a fragile artifact of LoRA hyperparameters and finetuning context, making it an unstable channel for behavioral transmission.
Subliminal Learning is a LoRA Artifact Todd Nief1∗ Harvey Yiyun Fu1 Mark Muchane1 Ari Holtzman1,2 1 Department of Computer Science, University of Chicago 2…
saved by
related reading
- Subliminal Learning: Language Models Transmit Behavioral Traits via Hidden Signals in Dataalignment.anthropic.com
- [2606.04071] Covert Influence Between Language Modelsarxiv.org
- LoRA Without Regret - Thinking Machines Labthinkingmachines.ai
- [2509.23886] Towards Understanding Subliminal Learning: When and How Hidden Biases Transferarxiv.org
- Narrow Misalignment is Hard, Emergent Misalignment is Easy — LessWronglesswrong.com
- [2602.04863] Subliminal Effects in Your Data: A General Mechanism via Log-Linearityarxiv.org
- Student Projects - CS 2881R AI Safetyboazbk.github.io
- Thousand-dimensional structure — Resolutionresolution.org
- LoRA vs Full Fine-tuning: An Illusion of Equivalencearxiv.org
- [2510.04340] Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timearxiv.org
- How do LLMs generalize when we do training that is intuitively compatible with two off-distribution behaviors? — LessWronglesswrong.com
- Mechanistically Eliciting Latent Behaviors in Language Models — AI Alignment Forumalignmentforum.org