提出新方法检测微调带来的隐性对齐退化问题。
Looking in the Mirror: Introspecting Side-Effect Misalignments Induced by Fine-Tuning

- 设计新框架检测微调引发的意外对齐偏差
- 在未见模型和安全类别上表现更优
- 适合关注模型安全性的研究人员
微调虽能提升模型在目标领域的性能,但可能无意中破坏其原有对齐特性。现有研究多聚焦于显式植入行为后的自我解释,而实际部署中更需关注非相关任务微调引发的副作用对齐退化。为此,本文提出「副作用自省」新范式,并构建对应数据集。进一步提出Delta-Aware自省适配器(DAIA),通过同时处理基础模型激活值与微调引起的激活差异,增强对内部变化的敏感性。实验表明,该方法在未见微调模型和安全类别上具有良好的泛化能力,且持续优于现有自省适配器。
原文摘要 · Abstract (English)
Fine-tuning enables a source model to acquire desired capabilities and behaviors in a target domain while retaining much of its general-purpose competence. However, this adaptation process can also degrade alignment properties that were present in the source model. Recent work has shown that large language models can be trained using LoRA-based modules known as introspection adapters (IAs) to describe behavioral changes induced by fine-tuning. However, existing studies primarily consider settings in which the model is fine-tuned on datasets explicitly designed to implant a specific behavior and is then asked to explain the implanted behavior. This differs from practical deployment scenarios, where the central concern is often side-effect misalignment: unintended degradation of alignment caused by fine-tuning on tasks that are not obviously related to safety or alignment. To bridge this gap, we formulate a novel problem setting called \emph{side-effect introspection}, in which the target of introspection is not a behavior explicitly implanted through fine-tuning, but rather alignment shifts that emerge as unintended side effects, and we construct a dataset for this setting. Furthermore, to enhance sensitivity to internal model changes, we propose the Delta-Aware Introspection Adapter (DAIA), a novel mechanism designed to explicitly process both base-model activations and activation differences induced by fine-tuning. Our empirical evaluation shows that introspection learning generalizes to unseen fine-tuned models and safety categories, and that DAIA consistently outperforms existing introspection adapters.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。