mlsanityData to 7 Oct 2026

Probe-Based Data Attribution: Discovering and Mitigating Undesirable Behaviors in LLM Post-Training

arXiv 2602.11079 ↗First posted 11 Feb 2026cs.LG cs.AIcited by 5

Not on the map. Why?

Abstract (arXiv)

We propose probe-based data attribution, a method that traces behavioral changes in post-trained language models to responsible training datapoints. By computing activation-difference vectors for both test prompts and preference pairs and ranking by cosine similarity, we identify datapoints that cause specific behaviors and validate these attributions causally by retraining with modified data. Clustering behavior-datapoint similarity matrices also enables unsupervised discovery of emergent behaviors. Applying this to OLMo 2's production DPO training, we surfaced distractor-triggered compliance: a harmful behavior where the model complies with dangerous requests when benign formatting instructions are appended. Filtering top-ranked datapoints reduces this behavior by 63% while switching their labels achieves 78%. Our method outperforms gradient-based attribution and LLM-judge baselines while being over 10 times cheaper than both. This in-the-wild model organism - emerging from contaminated preference data rather than deliberate injection - provides a realistic benchmark for safety techniques.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 21 of its 32 references that are in the map. First posted on arXiv 11 Feb 2026.

Builds on

21 of 32 references.

References · 21

  1. 2022Training language models to follow instructions with human feedbackcited by 15,712
  2. 2021Training Verifiers to Solve Math Word Problemscited by 9,743
  3. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  4. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
  5. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  6. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  7. 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
  8. 2023Instruction-Following Evaluation for Large Language Modelscited by 1,143
  9. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
  10. 2022Toy Models of Superpositioncited by 928
  11. 2023Steering Language Models With Activation Engineeringcited by 824
  12. 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
9 more
  1. 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 679
  2. 2020Estimating Training Data Influence by Tracing Gradient Descentcited by 565
  3. 2024LESS: Selecting Influential Data for Targeted Instruction Tuningcited by 514
  4. 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 478
  5. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
  6. 2023LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Datasetcited by 449
  7. 2025Persona Vectors: Monitoring and Controlling Character Traits in Language Modelscited by 303
  8. 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 131
  9. 2025Narrow Finetuning Leaves Clearly Readable Traces in Activation Differencescited by 24

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 5.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Scalable Attribution and Control of Model Behavior During Training
  2. 2025Detecting Data Contamination from Reinforcement Learning Post-training for Large Language Models
  3. 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment
  4. 2026DRIFT: Data Selection for LLM Instruction Tuning via On-Policy Attribution
  5. 2025Probe-based Fine-tuning for Reducing Toxicity
  6. 2024ROSE: A Reward-Oriented Data Selection Framework for LLM Task-Specific Instruction Tuning
  7. 2026Alignment via Training Against Probes Without Losing Monitorability
  8. 2025Behavior Injection: Preparing Language Models for Reinforcement Learning