Convergent Linear Representations of Emergent Misalignment
Not on the map. Why?
Abstract (arXiv)
Fine-tuning large language models on narrow datasets can cause them to develop broadly misaligned behaviours: a phenomena known as emergent misalignment. However, the mechanisms underlying this misalignment, and why it generalizes beyond the training domain, are poorly understood, demonstrating critical gaps in our knowledge of model alignment. In this work, we train and study a minimal model organism which uses just 9 rank-1 adapters to emergently misalign Qwen2.5-14B-Instruct. Studying this, we find that different emergently misaligned models converge to similar representations of misalignment. We demonstrate this convergence by extracting a 'misalignment direction' from one fine-tuned model's activations, and using it to effectively ablate misaligned behaviour from fine-tunes using higher dimensional LoRAs and different datasets. Leveraging the scalar hidden state of rank-1 LoRAs, we further present a set of experiments for directly interpreting the fine-tuning adapters, showing that six contribute to general misalignment, while two specialise for misalignment in just the fine-tuning domain. Emergent misalignment is a particularly salient example of undesirable and unexpected model behaviour and by advancing our understanding of the mechanisms behind it, we hope to move towards being able to better understand and mitigate misalignment more generally.
Key facts. Cited by 71 papers in the map (data through 14 Oct 2026). Builds on 18 of its 32 references that are in the map. First posted on arXiv 13 Jun 2025.
Builds on
18 of 32 references.
References · 18
- 2013Efficient Estimation of Word Representations in Vector Spacecited by 4,375
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
- 2023Steering Language Models With Activation Engineeringcited by 922
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 767
- 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 716
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 529
- 2020Null It Out: Guarding Protected Attributes by Iterative Nullspace Projectioncited by 455
- 2023Emergent Linear Representations in World Models of Self-Supervised Sequence Modelscited by 319
- 2023LEACE: Perfect linear concept erasure in closed formcited by 267
- 2023A Rank Stabilization Scaling Factor for Fine-Tuning with LoRAcited by 243
- 2023Linear Representations of Sentiment in Large Language Modelscited by 163
6 more
- 2025The Geometry of Refusal in Large Language Models: Concept Cones and Representational Independencecited by 115
- 2025Tell me about yourself: LLMs are aware of their learned behaviorscited by 91
- 2024Me, Myself, and AI: The Situational Awareness Dataset (SAD) for LLMscited by 84
- 2022Gold Doesn't Always Glitter: Spectral Removal of Linear and Nonlinear Guarded Attribute Informationcited by 34
- 2022Better Hit the Nail on the Head than Beat around the Bush: Removing Protected Attributes with a Single Projectioncited by 17
- 2025Compromising Honesty and Harmlessness in Language Models via Deception Attackscited by 17
Built on by
Citing papers per year: 2025: 11; 2026: 60.
71 papers.
Sort:
By area:
- 2025Persona Features Control Emergent Misalignmentcited by 86
- 2026Emergent Misalignment is Easy, Narrow Misalignment is Hardcited by 23
- 2025Emergent Misalignment via In-Context Learning: Narrow in-context examples can produce broadly misaligned LLMscited by 17
- 2025In-Training Defenses against Emergent Misalignment in Language Modelscited by 15
- 2026Monitoring Emergent Reward Hacking During Generation via Internal Activationscited by 14
- 2026Subliminal Learning Is Steering Vector Distillationcited by 13
- 2025Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Trainingcited by 12
- 2026Where is the Mind? Persona Vectors and LLM Individuationcited by 10
- 2026LLMs Know They're Wrong and Agree Anyway: The Shared Sycophancy-Lying Circuitcited by 10
- 2025Shared Parameter Subspaces and Cross-Task Linearity in Emergently Misaligned Behaviorcited by 8
- 2026Concept Influence: Leveraging Interpretability to Improve Performance and Efficiency in Training Data Attributioncited by 8
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfercited by 8
38 more
- 2026Mechanisms of Introspective Awarenesscited by 7
- 2026Understanding Emergent Misalignment via Feature Superposition Geometrycited by 7
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidencecited by 7
- 2025Emergent misalignment as prompt sensitivity: A research notecited by 6
- 2026Emergently Misaligned Language Models Show Behavioral Self-Awareness That Shifts With Subsequent Realignmentcited by 6
- 2026Narrow Fine-Tuning Erodes Safety Alignment in Vision-Language Agentscited by 6
- 2025Decomposing Behavioral Phase Transitions in LLMs: Order Parameters for Emergent Misalignmentcited by 5
- 2025The Devil in the Details: Emergent Misalignment, Format and Coherence in Open-Weights LLMscited by 5
- 2026Character as a Latent Variable in Large Language Models: A Mechanistic Account of Emergent Misalignment and Conditional Safety Failurescited by 5
- 2025Memory Retrieval and Consolidation in Large Language Models through Function Tokenscited by 4
- 2026Delta-Crosscoder: Robust Crosscoder Model Diffing in Narrow Fine-Tuning Regimescited by 4
- 2026From Density Matrices to Phase Transitions in Deep Learning: Spectral Early Warnings and Interpretabilitycited by 4
- 2026Activation Steering for Aligned Open-ended Generation without Sacrificing Coherencecited by 4
- 2025Latent Concept Disentanglement in Transformer-based Language Modelscited by 3
- 2026Assessing Domain-Level Susceptibility to Emergent Misalignment from Narrow Finetuningcited by 3
- 2026From Reward-Hack Activations to Agentic Risk States: Context-Calibrated Mechanistic Monitoring in LLM Agentscited by 3
- 2026Emergent Misalignment Recruits a Pre-existing Persona Subspacecited by 3
- 2026The Piggyback Hypothesis of Generalization: Explaining and Mitigating Emergent Misalignmentcited by 2
- 2026Activation Steering Induces Emergent Misalignment: A More Comprehensive Evaluationcited by 2
- 2026An Emergent Mirage: Is Emergent Misalignment and Realignment Indeed a Robust Phenomenon?cited by 2
- 2025The Horcrux: Mechanistically Interpretable Task Decomposition for Detecting and Mitigating Reward Hacking in Embodied AI Systemscited by 1
- 2026The Shadow Self: Intrinsic Value Misalignment in Large Language Model Agentscited by 1
- 2026A Geometric Taxonomy of Hallucinations in LLMscited by 1
- 2026Value Entanglement: Conflation Between Different Kinds of Good In (Some) Large Language Modelscited by 1
- 2026Not Just the Destination, But the Journey: Reasoning Traces Causally Shape Generalization Behaviorscited by 1
- 2026Why Safety Probes Catch Liars But Miss Fanaticscited by 1
- 2026Weird Generalization is Weirdly Brittlecited by 1
- 2026Surgical Repair of Insecure Code Generation in LLMscited by 1
- 2026Characterizing the Consistency of the Emergent Misalignment Personacited by 1
- 2026Persona-Model Collapse in Emergent Misalignmentcited by 1
- 2026Unsupervised Identification and Removal of Spurious Correlations During Fine-Tuningcited by 1
- 2026Emergent Misalignment Can Be Induced by Sycophancy and Reversed via Alignment Gatingcited by 1
- 2026Actionable Activation Directions for Detecting and Mitigating Emergent Misalignment Across Language Model Familiescited by 1
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignmentcited by 1
- 2026Revealing Hidden Model Behaviors with Task-Specific Self-Reportscited by 1
- 2026Data Attribution of Emergent Misalignment with Persona Featurescited by 1
- 2026TAME: Token Attribution and Masking for Emergent misalignmentcited by 1
- 2026Measuring the Assistant's Harmlessness Preferences on the User Turncited by 1
50 most cited of 71 All 71 (JSON)
- 2026Imprinting: Knowledge Distillation Can Shift Student Behavior13 Oct 2026
- 2026Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs via Weight Orthogonalisation29 Sep 2026
- 2026Aligned Data Can Induce Misalignment via Context Confusion29 Sep 2026
- 2026The Unequal Influence of Bad Advice: Using Training Data Attribution to Modulate Emergent Misalignment29 Sep 2026
- 2026Correct, Don't Delete: Mitigating Emergent Misalignment with Corrective Supervision29 Sep 2026
- 2026Narrow Multimodal Fine-Tuning Can Induce Emergent Misalignment28 Sep 2026
- 2026See it, Say it, Sorted: Mechanistic Diagnosis and Parameter-Space Mitigation of Emergent Misalignment in LLMs28 Sep 2026
- 2026On Emergent Capabilities and Model Merging21 Sep 2026
- 2026Measuring the Assistant's Harmlessness Preferences on the User Turn20 Sep 2026
- 2026TAME: Token Attribution and Masking for Emergent misalignment15 Sep 2026
- 2026Emergent Misalignment Is Not Magical29 Aug 2026
- 2026Mitigating Reasoning-Induced Misalignment via Safety-Direction Penalty24 Aug 2026
38 more
- 2026On the Threat Model of Weird Generalization and Emergent Misalignment24 Aug 2026
- 2026Data Attribution of Emergent Misalignment with Persona Features11 Aug 2026
- 2026Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment8 Aug 2026
- 2026Emergent Misalignment Recruits a Pre-existing Persona Subspace23 Jul 2026
- 2026An Emergent Mirage: Is Emergent Misalignment and Realignment Indeed a Robust Phenomenon?10 Jul 2026
- 2026Transplanting, inverting, and preventing a misalignment persona: method-conditional emergent misalignment in Qwen2.55 Jul 2026
- 2026Revealing Hidden Model Behaviors with Task-Specific Self-Reports3 Jul 2026
- 2026A Gravitational Interpretation of Safety Reversion under Fine-Tuning26 Jun 2026
- 2026Weight-Space Geometry of Offline Reasoning Training21 Jun 2026
- 2026What Shapes Emergent Misalignment? Insights from Training Dynamics, Model Priors, and Data18 Jun 2026
- 2026Actionable Activation Directions for Detecting and Mitigating Emergent Misalignment Across Language Model Families18 Jun 2026
- 2026Emergent Misalignment Can Be Induced by Sycophancy and Reversed via Alignment Gating8 Jun 2026
- 2026Activation Steering Induces Emergent Misalignment: A More Comprehensive Evaluation7 Jun 2026
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignment4 Jun 2026
- 2026The Piggyback Hypothesis of Generalization: Explaining and Mitigating Emergent Misalignment4 Jun 2026
- 2026From Reward-Hack Activations to Agentic Risk States: Context-Calibrated Mechanistic Monitoring in LLM Agents4 Jun 2026
- 2026Trait-space Monitoring for Emergent Misalignment During Supervised Finetuning31 May 2026
- 2026Subliminal Learning Is Steering Vector Distillation31 May 2026
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidence29 May 2026
- 2026Unsupervised Identification and Removal of Spurious Correlations During Fine-Tuning26 May 2026
- 2026Persona-Model Collapse in Emergent Misalignment13 May 2026
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfer12 May 2026
- 2026Intrinsic Guardrails: How Semantic Geometry of Personality Interacts with Emergent Misalignment in LLMs11 May 2026
- 2026Phase Transitions in Driven Informational Systems: A Two-Field Perspective on Learning Theory and Non-Equilibrium Chemistry5 May 2026
- 2026Characterizing the Consistency of the Emergent Misalignment Persona30 Apr 2026
- 2026LLMs Know They're Wrong and Agree Anyway: The Shared Sycophancy-Lying Circuit21 Apr 2026
- 2026Where is the Mind? Persona Vectors and LLM Individuation18 Apr 2026
- 2026Surgical Repair of Insecure Code Generation in LLMs17 Apr 2026
- 2026Weird Generalization is Weirdly Brittle11 Apr 2026
- 2026Activation Steering for Aligned Open-ended Generation without Sacrificing Coherence9 Apr 2026
- 2026Understanding Emergent Misalignment via Feature Superposition Geometry7 Apr 2026
- 2026From Density Matrices to Phase Transitions in Deep Learning: Spectral Early Warnings and Interpretability31 Mar 2026
- 2026Why Safety Probes Catch Liars But Miss Fanatics26 Mar 2026
- 2026Mechanisms of Introspective Awareness22 Mar 2026
- 2026Not Just the Destination, But the Journey: Reasoning Traces Causally Shape Generalization Behaviors12 Mar 2026
- 2026Monitoring Emergent Reward Hacking During Generation via Internal Activations4 Mar 2026
- 2026Value Entanglement: Conflation Between Different Kinds of Good In (Some) Large Language Models22 Feb 2026
- 2026Narrow Fine-Tuning Erodes Safety Alignment in Vision-Language Agents18 Feb 2026
50 newest of 71 All 71 (JSON)
- 2025In-Training Defenses against Emergent Misalignment in Language Modelscited by 15
- 2026Monitoring Emergent Reward Hacking During Generation via Internal Activationscited by 14
- 2026Emergently Misaligned Language Models Show Behavioral Self-Awareness That Shifts With Subsequent Realignmentcited by 6
- 2026Emergent Misalignment Recruits a Pre-existing Persona Subspacecited by 3
- 2025The Horcrux: Mechanistically Interpretable Task Decomposition for Detecting and Mitigating Reward Hacking in Embodied AI Systemscited by 1
- 2026Value Entanglement: Conflation Between Different Kinds of Good In (Some) Large Language Modelscited by 1
- 2026TAME: Token Attribution and Masking for Emergent misalignmentcited by 1
- 2026Comparing Explanations is Not Enough, Explain the Change: New Standards are Needed to Explain Behavioral Shifts in Large Language Modelscited by 0
- 2026TAME: Token Attribution and Masking for Emergent misalignment15 Sep 2026
- 2026Emergent Misalignment Recruits a Pre-existing Persona Subspace23 Jul 2026
- 2026Monitoring Emergent Reward Hacking During Generation via Internal Activations4 Mar 2026
- 2026Value Entanglement: Conflation Between Different Kinds of Good In (Some) Large Language Models22 Feb 2026
- 2026Emergently Misaligned Language Models Show Behavioral Self-Awareness That Shifts With Subsequent Realignment16 Feb 2026
- 2026Comparing Explanations is Not Enough, Explain the Change: New Standards are Needed to Explain Behavioral Shifts in Large Language Models2 Feb 2026
- 2025The Horcrux: Mechanistically Interpretable Task Decomposition for Detecting and Mitigating Reward Hacking in Embodied AI Systems22 Nov 2025
- 2025In-Training Defenses against Emergent Misalignment in Language Models8 Aug 2025
- 2026Character as a Latent Variable in Large Language Models: A Mechanistic Account of Emergent Misalignment and Conditional Safety Failurescited by 5
- 2026Activation Steering for Aligned Open-ended Generation without Sacrificing Coherencecited by 4
- 2026Assessing Domain-Level Susceptibility to Emergent Misalignment from Narrow Finetuningcited by 3
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignmentcited by 1
- 2026Intrinsic Guardrails: How Semantic Geometry of Personality Interacts with Emergent Misalignment in LLMscited by 0
- 2026A Gravitational Interpretation of Safety Reversion under Fine-Tuningcited by 0
- 2026Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignmentcited by 0
- 2026Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs via Weight Orthogonalisationcited by 0
- 2026Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs via Weight Orthogonalisation29 Sep 2026
- 2026Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment8 Aug 2026
- 2026A Gravitational Interpretation of Safety Reversion under Fine-Tuning26 Jun 2026
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignment4 Jun 2026
- 2026Intrinsic Guardrails: How Semantic Geometry of Personality Interacts with Emergent Misalignment in LLMs11 May 2026
- 2026Activation Steering for Aligned Open-ended Generation without Sacrificing Coherence9 Apr 2026
- 2026Assessing Domain-Level Susceptibility to Emergent Misalignment from Narrow Finetuning30 Jan 2026
- 2026Character as a Latent Variable in Large Language Models: A Mechanistic Account of Emergent Misalignment and Conditional Safety Failures30 Jan 2026
- 2026Subliminal Learning Is Steering Vector Distillationcited by 13
- 2026Concept Influence: Leveraging Interpretability to Improve Performance and Efficiency in Training Data Attributioncited by 8
- 2026Mechanisms of Introspective Awarenesscited by 7
- 2026Understanding Emergent Misalignment via Feature Superposition Geometrycited by 7
- 2026Activation Steering Induces Emergent Misalignment: A More Comprehensive Evaluationcited by 2
- 2026Data Attribution of Emergent Misalignment with Persona Featurescited by 1
- 2026Data Attribution of Emergent Misalignment with Persona Features11 Aug 2026
- 2026Activation Steering Induces Emergent Misalignment: A More Comprehensive Evaluation7 Jun 2026
- 2026Subliminal Learning Is Steering Vector Distillation31 May 2026
- 2026Understanding Emergent Misalignment via Feature Superposition Geometry7 Apr 2026
- 2026Mechanisms of Introspective Awareness22 Mar 2026
- 2026Concept Influence: Leveraging Interpretability to Improve Performance and Efficiency in Training Data Attribution16 Feb 2026
- 2025Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Trainingcited by 12
- 2026Not Just the Destination, But the Journey: Reasoning Traces Causally Shape Generalization Behaviorscited by 1
- 2026Weight-Space Geometry of Offline Reasoning Trainingcited by 0
- 2026Mitigating Reasoning-Induced Misalignment via Safety-Direction Penaltycited by 0
- 2026Mitigating Reasoning-Induced Misalignment via Safety-Direction Penalty24 Aug 2026
- 2026Weight-Space Geometry of Offline Reasoning Training21 Jun 2026
- 2026Not Just the Destination, But the Journey: Reasoning Traces Causally Shape Generalization Behaviors12 Mar 2026
- 2025Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training23 Oct 2025
- 2026Persona-Model Collapse in Emergent Misalignmentcited by 1
- 2026Persona-Model Collapse in Emergent Misalignment13 May 2026
- 2025Persona Features Control Emergent Misalignmentcited by 86
- 2026Emergent Misalignment is Easy, Narrow Misalignment is Hardcited by 23
- 2025Emergent Misalignment via In-Context Learning: Narrow in-context examples can produce broadly misaligned LLMscited by 17
- 2026Where is the Mind? Persona Vectors and LLM Individuationcited by 10
- 2026LLMs Know They're Wrong and Agree Anyway: The Shared Sycophancy-Lying Circuitcited by 10
- 2025Shared Parameter Subspaces and Cross-Task Linearity in Emergently Misaligned Behaviorcited by 8
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfercited by 8
- 2026Position: Anthropomorphic Misalignment Research Needs Stronger Evidencecited by 7
- 2025Emergent misalignment as prompt sensitivity: A research notecited by 6
- 2025Decomposing Behavioral Phase Transitions in LLMs: Order Parameters for Emergent Misalignmentcited by 5
- 2025The Devil in the Details: Emergent Misalignment, Format and Coherence in Open-Weights LLMscited by 5
- 2025Memory Retrieval and Consolidation in Large Language Models through Function Tokenscited by 4
12 most cited of 40 All 40 (JSON)
- 2026Aligned Data Can Induce Misalignment via Context Confusion29 Sep 2026
- 2026The Unequal Influence of Bad Advice: Using Training Data Attribution to Modulate Emergent Misalignment29 Sep 2026
- 2026Correct, Don't Delete: Mitigating Emergent Misalignment with Corrective Supervision29 Sep 2026
- 2026Narrow Multimodal Fine-Tuning Can Induce Emergent Misalignment28 Sep 2026
- 2026See it, Say it, Sorted: Mechanistic Diagnosis and Parameter-Space Mitigation of Emergent Misalignment in LLMs28 Sep 2026
- 2026On Emergent Capabilities and Model Merging21 Sep 2026
- 2026Measuring the Assistant's Harmlessness Preferences on the User Turn20 Sep 2026
- 2026Emergent Misalignment Is Not Magical29 Aug 2026
- 2026On the Threat Model of Weird Generalization and Emergent Misalignment24 Aug 2026
- 2026An Emergent Mirage: Is Emergent Misalignment and Realignment Indeed a Robust Phenomenon?10 Jul 2026
- 2026Transplanting, inverting, and preventing a misalignment persona: method-conditional emergent misalignment in Qwen2.55 Jul 2026
- 2026Revealing Hidden Model Behaviors with Task-Specific Self-Reports3 Jul 2026
12 newest of 40 All 40 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025Model Organisms for Emergent Misalignment
- 2026Overtrained, Not Misaligned
- 2026Reinforcement Learning Can Amplify Emergent Misalignment from Harmless Rewards
- 2026Are Aligned Large Language Models Still Misaligned?
- 2025Re-Emergent Misalignment: How Narrow Fine-Tuning Erodes Safety Alignment in LLMs
- 2026Ventriloquist LLMs: Linear Alignment of Late-Stage Representations
- 2024Language Models Resist Alignment: Evidence From Data Compression
- 2026Alignment Dynamics in LLM Fine-Tuning