Trustworthiness Costs of Domain Adaptation in Small Language Models:A Cross-Architecture Empirical Study
Not on the map. Why?
Abstract (arXiv)
Domain adaptation of small language models (SLMs) has emerged as a practical strategy for deploying capable NLP systems in resource-constrained, high-stakes environments including healthcare, legal services, and financial analysis. While performance gains from parameter-efficient fine-tuning are well characterised, the corresponding impact on trustworthiness (factual calibration and adversarial robustness) remains poorly understood. This paper presents the first systematic cross-domain, cross-architecture empirical study quantifying the trustworthiness cost of domain adaptation across three SLM architectures (TinyLlama 1B, Gemma-2 2B, Llama 3.2 1B), three domains (healthcare, legal, finance), two training-data conditions (benign and adversarially perturbed), and four fine-tuning strategies (baseline LoRA, Safety-DPO, Dark Experience Replay, and Task Arithmetic LoRA, TA-LoRA). Trustworthiness is evaluated through TruthfulQA MC2 (factual calibration) and HarmBench ASR (adversarial robustness) across all 216 experimental configurations with three random seeds. Three principal findings emerge. First, baseline QLoRA domain adaptation produces minimal TruthfulQA MC2 change across all model-domain combinations (mean |Delta TQA| < 0.02). Second, adversarially perturbed training data consistently improves domain adaptation quality (Delta loss approximately -0.040) without worsening trustworthiness benchmarks. Third, none of the three safety-preserving strategies reduced adversarial harm susceptibility: Safety-DPO was effectively neutral (mean Delta ASR < 0.001), while Dark ER and TA-LoRA increased mean HarmBench ASR by +0.171 and +0.155 respectively in safety-aligned models (Gemma-2 2B, Llama 3.2 1B), with individual configurations exceeding +0.45. These results challenge the assumption that replay-based and arithmetic-merge strategies transfer alignment to domain-adapted SLMs.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 44 of its 66 references that are in the map. First posted on arXiv 23 Jul 2026.
Builds on
44 of 66 references.
References · 44
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,565
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2020What Disease does this Patient Have? A Large-scale Open Domain Question Answering Dataset from Medical Examscited by 1,356
- 2019PubMedQA: A Dataset for Biomedical Research Question Answeringcited by 1,288
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2022Editing Models with Task Arithmeticcited by 1,120
32 more
- 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 912
- 2020Dark Experience for General Continual Learning: a Strong, Simple Baselinecited by 911
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2024TinyLlama: An Open-Source Small Language Modelcited by 618
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 387
- 2023LegalBench: A Collaboratively Built Benchmark for Measuring Legal Reasoning in Large Language Modelscited by 336
- 2013Good Debt or Bad Debt: Detecting Semantic Orientations in Economic Textscited by 310
- 2024BioMistral: A Collection of Open-Source Pretrained Large Language Models for Medical Domainscited by 301
- 2021CUAD: An Expert-Annotated NLP Dataset for Legal Contract Reviewcited by 236
- 2021When Does Pretraining Help? Assessing Self-Supervised Learning for Law and the CaseHOLD Datasetcited by 201
- 2024Large Legal Fictions: Profiling Legal Hallucinations in Large Language Modelscited by 150
- 2023Large Language Models for Automated Data Science: Introducing CAAFE for Context-Aware Automated Feature Engineeringcited by 127
- 2024A Comprehensive Survey of Small Language Models in the Era of Large Language Models: Techniques, Enhancements, Applications, Collaboration with LLMs, and Trustworthinesscited by 127
- 2024Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Modelscited by 125
- 2024Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attackcited by 115
- 2024Language Models are Homer Simpson! Safety Re-Alignment of Fine-tuned Language Models through Task Arithmeticcited by 112
- 2024Small Language Models: Survey, Measurements, and Insightscited by 112
- 2024Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templatescited by 96
- 2024Lisa: Lazy Safety Alignment for Large Language Models against Harmful Fine-tuning Attackcited by 92
- 2024Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbationcited by 92
- 2024BioMedLM: A 2.7B Parameter Language Model Trained On Biomedical Textcited by 86
- 2024Against The Achilles' Heel: A Survey on Red Teaming for Generative Modelscited by 59
- 2024MedSafetyBench: Evaluating and Improving the Medical Safety of Large Language Modelscited by 44
- 2025SaLoRA: Safety-Alignment Preserved Low-Rank Adaptationcited by 42
- 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistencycited by 27
- 2024Preference Tuning with Human Feedback on Language, Speech, and Vision Tasks: A Surveycited by 23
- 2025Unforgotten Safety: Preserving Safety Alignment of Large Language Models with Continual Learningcited by 10
- 2025A Guardrail for Safety Preservation: When Safety-Sensitive Subspace Meets Harmful-Resistant Null-Spacecited by 9
- 2025Safety Subspaces are Not Linearly Distinct: A Fine-Tuning Case Studycited by 6
- 2025Understanding AI Trustworthiness: A Scoping Review of AIES & FAccT Articlescited by 6
- 2026GR-SAP: Generative Replay for Safety Alignment Preservation during Fine-Tuningcited by 2
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Benchmarking Trustworthiness of SLMs: Pre-trained vs. Compressed
- 2023How Trustworthy are Open-Source LLMs? An Assessment under Malicious Demonstrations Shows their Vulnerabilities
- 2026Auditing Training Data in Domain-adapted LLMs: LoRA-MINT
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment
- 2025SciTrust 2.0: A Comprehensive Framework for Evaluating Trustworthiness of Large Language Models in Scientific Applications
- 2026The ACUTE Protocol: Operationalizing Language Model Activations for Better Calibration, Utility, and Trust
- 2025AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research
- 2025Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation