Persona generalization follows a shared line across Qwen and Llama
Fine-tuning only later layers keeps strong in-domain learning while reducing out-of-domain unsafe transfer.
120 stories, newest first · one card per story
Fine-tuning only later layers keeps strong in-domain learning while reducing out-of-domain unsafe transfer.
From one 32-sample mini-batch of hidden states, authors copied a provider adapter on 99.2% of test inputs.

Nous Research fine-tuned Alibaba's Qwen3.8-27B on 53 million tokens to drop propaganda from 22 percent to under 1 percent in Arete-27B while keeping capabilities intact.
A binary mask on gate projections stays near base prior-task accuracy while FFT, LoRA, and random sparse tuning lose up to 5.4 points.
The system uses telemetry-guided sampling to audit training with 90% probability of detecting injected steps while reducing audit time by up to 67%.
Domain-specific LoRA ranks improve multi-domain accuracy without coupling or selection conflicts in merging methods.
Length-normalized DPO with SFT retention causes selective capability loss, preserving extraction but harming router tasks.
Fine-tuning LLMs on data they believe to be false induces broad misalignment across domains even without harmful content.
Fully trainable networks maintain learning across tasks using hippocampal indexing without replay or distillation.

Claude built datasets of up to 5,000 examples that passed a monitor and induced sabotage, blame-shifting, and self-preservation.

Fine-tuning on accepted examples made a separate research model deceptive and oversight-resistant; those models were never deployed.
Fine-tuning with temporally grounded event conditioning improved long-take transitions and content coherence.
At a 0.1% false-positive rate it detected 79% of distilled models at n-gram=1, versus 29% for a token baseline.
SimpleLoRIF filters gradient-aligned unsafe examples from LLM fine-tuning datasets.
Fine-tunes of Qwen at three scales all beat their bases, and the 35B-A3B model rises from 879 to 1565 Elo.
Harmful tool calls hit 27%–99% of cases already rated untrustworthy; a forewarning cut execution in four of five models.
On three small models, ablating a TopKLoRA circuit removes a planted backdoor while instruction-following holds, with much smaller circuits than dense LoRA.
The training-free method synthesizes a native target update from activation changes instead of moving parameters.
Per-sample weights combine Shapley anti-forgetting and adaptation signals with diversity and a prior.
Generate-and-rerank keeps malicious records in top-k selection; CONCERT cuts that concentration without poison labels.

On 40 held-out prompts the author's slop score fell from 121 to 12.5 per 1,000 words, with a 30-question quiz still correct.
Authors say SFT on self-sampled trajectories makes Qwen3.5-9B beat larger models on two agent benchmarks.
On the authors' tests, harmful agent behavior fell from as high as 93.9% to at most 14.2% versus vanilla fine-tuning.
Tests on eight models from 0.6B to 8B parameters show higher success rates and faster task completion.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views