You Didn't Have to Say It like That: Subliminal Learning from Faithful Paraphrases
Not on the map. Why?
Abstract (arXiv)
When language models are trained on synthetic data, they (student model) can covertly acquire behavioral traits from the data-generating model (teacher model). Subliminal learning refers to the transmission of traits from a teacher to a student model via training on data unrelated to those traits. Prior work demonstrated this in the training domains of number sequences, code, and math Chain-of-Thought traces including transmission of misaligned behaviors. We investigate whether transmission occurs through natural language paraphrases with fixed semantic content, and whether content explicitly contradicting the teacher's preference can block it. We find that training on paraphrases from a teacher system-prompted to love a particular animal increases a student's preference for that animal by up to 19 percentage points. This occurs when paraphrased content is semantically unrelated to the animal, or even when it explicitly expresses dislike. The transmission succeeds despite aggressive filtering to ensure paraphrase fidelity. This raises concerns for pipelines where models generate their own training data: content-based inspection cannot detect such transmission, and even preference-contradicting content fails to prevent it.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 6 of its 49 references that are in the map. First posted on arXiv 10 Mar 2026.
Builds on
6 of 49 references.
References · 6
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2021Symbolic Knowledge Distillation: from General Language Models to Commonsense Modelscited by 270
- 2025Subliminal Learning: Language models transmit behavioral traits via hidden signals in datacited by 89
- 2025Towards Understanding Subliminal Learning: When and How Hidden Biases Transfercited by 30
- 2025Open Character Training: Shaping the Persona of AI Assistants through Constitutional AIcited by 19
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026Subliminal Learning Is Steering Vector Distillationcited by 9
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfercited by 6
- 2026Channel Location Constrains the Auditability of Subliminal Learningcited by 5
- 2026Mechanist: AI as a Scientific Instrument for Discovering the Mechanisms of Intelligencecited by 1
- 2026Towards Identifying the Dataset Biases Causing Phantom Transfercited by 0
- 2026Can Data Attribution Filter Out Subliminal Learning? Not Reliablycited by 0
- 2026Post-Training Leaves Behavioral Shadows on Unrelated Decisionscited by 0
- 2026Post-Training Leaves Behavioral Shadows on Unrelated Decisions24 Sep 2026
- 2026Can Data Attribution Filter Out Subliminal Learning? Not Reliably17 Sep 2026
- 2026Towards Identifying the Dataset Biases Causing Phantom Transfer13 Sep 2026
- 2026Mechanist: AI as a Scientific Instrument for Discovering the Mechanisms of Intelligence12 Aug 2026
- 2026Channel Location Constrains the Auditability of Subliminal Learning20 Jun 2026
- 2026Subliminal Learning Is Steering Vector Distillation31 May 2026
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfer12 May 2026
Similar, not cited
Close in wording, no citation either way
- 2026On Mitigation of Subliminal Learning in Large Language Models
- 2026Reproducing and Evaluating the Generalizability of Subliminal Learning in Open-Weight Models
- 2026Beyond Owls: Subliminal Learning Can Transfer Learned Capabilities and Backdoors
- 2026Subliminal Transfer of Unsafe Behaviors in AI Agent Distillation
- 2026Subliminal Signals in Preference Labels
- 2026On Repulsive and Attractive Teachers: Separating Correctness from Behavior in Self-Distillation
- 2025Capturing Nuanced Preferences: Preference-Aligned Distillation for Small Language Models
- 2023Alignment is not sufficient to prevent large language models from generating harmful information: A psychoanalytic perspective