[2509.23886] Towards Understanding Subliminal Learning: When and How Hidden Biases Transfer
Abstract:Language models can transfer hidden biases during distillation. For example, a teacher that "likes owls" can make its student "like owls" too, even when the training data consists only of lists of numbers. This surprising phenomenon is called subliminal learning. Subliminal learning can be expected under soft distillation, where the student is trained on the teacher's full next-token distribution. But the fact that this also occurs under hard distillation-where the student only sees sampled tokens-raises a deeper question: when and how does subliminal learning actually occur? We answer this question through controlled experiments and mechanistic analysis. Our results show that subliminal learning does not need (global) token entanglement or logit leakage. Instead, it comes down to a small set of divergence tokens-rare cases where teachers with different biases would predict different tokens. Masking out these tokens mostly removes the hidden bias transfer. Mechanistically, divergence tokens reveal that early layers are critical. Surprisingly, finetuning even a single such early layer is sufficient for subliminal learning. Finally, we find that subliminal learning is fragile. Even small changes, like prompt paraphrasings, are usually sufficient to suppress it.
Published as a conference paper at ICLR 2026 T OWARDS U NDERSTANDING S UBLIMINAL L EARNING : W HEN AND H OW H IDDEN B IASES T RANSFER Simon Schrodi∗,1 Elias Kempf∗,1 Fazl Barez2,3,4 Thomas Brox1 1 University of Freiburg 2 University of Oxford 3 WhiteBox 4 Martian…
related reading
- Subliminal Learning: Language Models Transmit Behavioral Traits via Hidden Signals in Dataalignment.anthropic.com
- [2606.00831] Subliminal Learning is a LoRA Artifactarxiv.org
- [2606.04071] Covert Influence Between Language Modelsarxiv.org
- [2305.18290] Direct Preference Optimization: Your Language Model is Secretly a Reward Modelarxiv.org
- [2502.17424] Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMsarxiv.org
- [2512.11949] Neural Chameleons: Language Models Can Learn to Hide Their Thoughts from Unseen Activation Monitorsarxiv.org
- [2511.08579] Training Language Models to Explain Their Own Computationsarxiv.org
- [2604.16812] Introspection Adapters: Training LLMs to Report Their Learned Behaviorsarxiv.org
- [2602.04863] Subliminal Effects in Your Data: A General Mechanism via Log-Linearityarxiv.org
- Auditing language models for hidden objectives — LessWronglesswrong.com
- [2602.04899] Phantom Transfer: Data-level Defences are Insufficient Against Data Poisoningarxiv.org
- [2503.10965] Auditing language models for hidden objectivesarxiv.org