arXiv:2606.00831cs.AIcs.LG2026-06被引 4

LoRA微调的特定设置会引发虚假的行为传递现象。

Subliminal Learning is a LoRA Artifact

论文配图:Subliminal Learning is a LoRA Artifact
图 1 · 摘自论文原文
  • 发现行为传递源于LoRA微调的副作用,而非真实学习。
  • 传递效果随LoRA秩呈倒U型变化,全微调时消失。
  • 仅在训练与推理时共同出现的上下文片段中生效。

亚阈值学习指语言模型可通过看似无害的数据将行为特征传递给其他模型(Cloud等,2025)。在此过程中,具有特定行为特征(如对猫的痴迷)的教师模型,可将该特征传递给仅在教师生成的数值序列上微调的学生模型。本文探究这一异常行为传递的机制。结果表明,亚阈值学习实为LoRA微调的产物:其传递效果随LoRA秩呈现倒U型关系,且在全量微调时消失。该现象高度依赖训练与评估阶段共同出现的上下文信息。例如,当Qwen模型在默认系统提示下训练("You are Qwen, created by Alibaba Cloud. You are a helpful assistant."),但在生成时未包含系统提示时,则不会表现出亚阈值学习。进一步发现,这种行为仅局限于训练与推理中均出现的令牌(如默认系统提示、标准聊天模板等)所对应的计算路径。整体而言,亚阈值学习是LoRA超参数与微调上下文共同作用下的脆弱现象,难以作为稳定的行为传递通道。

原文摘要 · Abstract (English)

Subliminal learning is a phenomenon where language models can transmit behavioral traits to other models through seemingly innocuous data (Cloud et al., 2025). In subliminal learning, a teacher model with a behavioral trait (e.g. obsession with cats) can transmit this cat obsession to a student model finetuned only on numerical sequences generated by the teacher. In this paper, we ask: how does this unexpected behavioral transmission occur? We show that subliminal learning is a LoRA artifact. When subliminal learning occurs, transmission has an inverted U-shaped relationship with LoRA rank; it also disappears with full finetuning. We show that subliminal learning is highly dependent on the context seen during finetuning and evaluation. For example, a Qwen model with the default system prompt during finetuning ("You are Qwen, created by Alibaba Cloud. You are a helpful assistant.") does not show subliminal learning during generation when no system prompt is included. We further demonstrate that subliminal behavior is localized to computation at tokens seen during both finetuning and evaluation (e.g. the model's default system prompt, the standard chat template tokens, etc.). Overall, subliminal learning seems to be a fragile artifact of LoRA hyperparameters and finetuning context, making it an unstable channel for behavioral transmission.

LoRA行为传递微调漏洞

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。