Toward understanding and preventing misalignment generalization
Large language models like ChatGPT don’t just learn facts—they pick up on patterns of behavior. That means they can start to act like different “personas,” or types of people, based on the content they’ve been trained on. Some of those personas are helpful and honest. Others might be careless or misleading.
Existing research showed that if you train a model on wrong answers, even in just one narrow area, like writing insecure computer code, it can inadvertently cause the model to act “misaligned” in many other areas. This is called “emergent misalignment.” We studied why this happens.
Through this research, we discovered a specific internal pattern in the model, similar to a pattern of brain activity, that becomes more active when this misaligned behavior appears. The model learned this pattern from training on data that describes bad behavior. We found we can make a model more or less aligned, just by directly increasing or decreasing this pattern’s activity. This suggests emergent misalignment works by strengthening a misaligned persona in the model.
We showed that training the model again on correct information can push it back toward helpful behavior. Together, this means we might be able to detect misaligned activity patterns, and fix the problem before it spreads.
In short, this work helps us understand why a model might start exhibiting misaligned behavior, and could give us a path towards an early warning system for misalignment during model training.
Lines of inquiry this paper opens 24
Research framings built by reading the notes related to this paper — the questions it feeds into.
Does alignment training create genuine alignment or just output compliance?- What happens when alignment values become misaligned with human preferences at scale?
- How do early training associations survive later alignment attempts?
- Does reward hacking in alignment research mirror misalignment in deployed systems?
- Do inoculation prompts prevent misalignment without harming instruction following?
- Why do some inoculation prompts account for only part of misaligned behavior?
- Does deliberate strategic misalignment emerge from ordinary training pressure?
- Why does correct model output not guarantee absence of internal misalignment?
- How do models generalize misaligned objectives beyond the specific behaviors they were trained on?
- Are instruction following gains and emergent misalignment from the same learned change?
- What base rate does concentrated task distribution tell us about real misalignment?
- Does representational distance predict which outputs trigger emergent misalignment?
- Which specific data formats produced more versus less emergent misalignment?
- Does format affect emergent misalignment through the representational distance mechanism?
- What counts as emergent misalignment versus standard capability overgeneralization?
- Why do broad misalignment behaviors cluster near training data geometrically?
- What counts as a real-world harm from misalignment versus a training artifact?
- Can monitors or steering vectors trained on one model control misalignment in another model?
- Does representational distance from training data centroid predict misalignment behavior within a model?
- How does dataset composition affect which internal directions encode misaligned behavior?