Seed-Induced Uniqueness in Transformer Models: Subspace Alignment Governs Subliminal Transfer
Not on the map. Why?
Abstract (arXiv)
We analyze subliminal transfer in Transformer models, where a teacher embeds hidden traits that can be linearly decoded by a student without degrading main-task performance. Prior work often attributes transferability to global representational similarity, typically quantified with Centered Kernel Alignment (CKA). Using synthetic corpora with disentangled public and private labels, we distill students under matched and independent random initializations. We find that transfer strength hinges on alignment within a trait-discriminative subspace: same-seed students inherit this alignment and show higher leakage τ ≈ 0.24, whereas different-seed students -- despite global CKA > 0.9 -- exhibit substantially reduced excess accuracy τ ≈ 0.12 - 0.13. We formalize this with subspace-level CKA diagnostic and residualized probes, showing that leakage tracks alignment within the trait-discriminative subspace rather than global representational similarity. Security controls (projection penalty, adversarial reversal, right-for-the-wrong-reasons regularization) reduce leakage in same-base models without impairing public-task fidelity. These results establish seed-induced uniqueness as a resilience property and argue for subspace-aware diagnostics for secure multi-model deployments.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 16 of its 34 references that are in the map. First posted on arXiv 2 Nov 2025.
Builds on
16 of 34 references.
References · 16
- 2017Attention Is All You Needcited by 60,361
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2019Similarity of Neural Network Representations Revisitedcited by 1,755
- 2016Understanding intermediate layers using linear classifier probescited by 1,353
- 2017Right for the Right Reasons: Training Differentiable Models by Constraining their Explanationscited by 294
- 2020Information-Theoretic Probing for Linguistic Structurecited by 207
- 2021Membership Inference Attack on Graph Neural Networkscited by 81
- 2021Layer-wise Adaptive Model Aggregation for Scalable Federated Learningcited by 36
- 2021A Non-Linear Structural Probecited by 31
- 2023Primer: Fast Private Transformer Inference on Encrypted Datacited by 20
- 2024Rough Transformers: Lightweight and Continuous Time Series Modelling through Signature Patchingcited by 16
- 2016Learning to Protect Communications with Adversarial Neural Cryptographycited by 11
4 more
- 2025CKAA: Cross-subspace Knowledge Alignment and Aggregation for Robust Continual Learningcited by 6
- 2023Enhanced Security against Adversarial Examples Using a Random Ensemble of Encrypted Vision Transformer Modelscited by 4
- 2023Block-Wise Encryption for Reliable Vision Transformer modelscited by 3
- 2024Disposable-key-based image encryption for collaborative learning of Vision Transformercited by 1
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Subliminal Learning Is Steering Vector Distillationcited by 13
- 2026Channel Location Constrains the Auditability of Subliminal Learningcited by 7
- 2026Stored in Optimizer State, Valued by Later Training: A Causal Account of Subliminal Trait Transfercited by 3
- 2026Scaling Model-Generated Distillation Data Can Make Latent Teacher Traits More Recoverablecited by 2
- 2026When and How Long? The Readout-Mediator Angle in Temporal Reasoningcited by 1
- 2026Scaling Model-Generated Distillation Data Can Make Latent Teacher Traits More Recoverable27 Aug 2026
- 2026Stored in Optimizer State, Valued by Later Training: A Causal Account of Subliminal Trait Transfer20 Aug 2026
- 2026Channel Location Constrains the Auditability of Subliminal Learning20 Jun 2026
- 2026Subliminal Learning Is Steering Vector Distillation31 May 2026
- 2026When and How Long? The Readout-Mediator Angle in Temporal Reasoning27 May 2026
Similar, not cited
Close in wording, no citation either way
- 2026Where Pretraining writes and Alignment reads: the asymmetry of Transformer weight space
- 2026Geometric and Behavioral Stratification in Transformer Residual Streams
- 2026Polymorphism Is Rotation: Operational Mechanistic Interpretability from a Two-Layer Transformer to Pythia-70m
- 2026What Visual Generators Need from Teachers: Rethinking Representation Alignment
- 2026Representational Capacity: Geometric Limits on Feature Representation in Transformer Language Models
- 2026Causal Dimensionality of Transformer Representations: Measurement, Scaling, and Layer Structure
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfer
- 2024Tracing Representation Progression: Analyzing and Enhancing Layer-Wise Similarity