Introspecting Alignment Shifts Beyond Behaviors Implanted Through Fine-Tuning
Not on the map. Why?
Abstract (arXiv)
Fine-tuning enables a source model to acquire desired capabilities and behaviors in a target domain while retaining much of its general-purpose competence. However, this adaptation process can also degrade alignment properties that were present in the source model. Recent work has shown that large language models can be trained using LoRA-based modules known as introspection adapters (IAs) to describe behavioral changes induced by fine-tuning. However, existing studies primarily consider settings in which the model is fine-tuned on datasets explicitly designed to implant a specific behavior and is then asked to explain the implanted behavior. This differs from practical deployment scenarios, where the misalignment is not necessarily deliberately implanted, but arises only as a side effect. To bridge this gap, we formulate a novel problem setting, in which the target of introspection is not necessarily a behavior explicitly implanted through fine-tuning, but rather alignment shifts that may emerge as unintended side effects, and we construct a dataset for this setting. Furthermore, to enhance sensitivity to internal model changes, we propose the Delta-Aware Introspection Adapter (DAIA), a novel mechanism designed to explicitly process both base-model activations and activation differences induced by fine-tuning. Our empirical evaluation shows that introspection learning generalizes to unseen fine-tuned models and safety categories, and that DAIA generally outperforms existing IAs.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 33 of its 76 references that are in the map. First posted on arXiv 5 Aug 2026.
Builds on
33 of 76 references.
References · 33
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2025Qwen3 Technical Reportcited by 8,195
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2016Layer Normalizationcited by 5,579
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,201
- 2025Gemma 3 Technical Reportcited by 1,686
- 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,548
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,359
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
21 more
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2024DoRA: Weight-Decomposed Low-Rank Adaptationcited by 740
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 700
- 2024A StrongREJECT for Empty Jailbreakscited by 352
- 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 292
- 2024How to use and interpret activation patchingcited by 191
- 2024Have Faith in Faithfulness: Going Beyond Circuit Overlap When Finding Model Mechanismscited by 144
- 2024What is in Your Safe Data? Identifying Benign Data that Breaks Safetycited by 114
- 2024Looking Inward: Language Models Can Learn About Themselves by Introspectioncited by 105
- 2025Tell me about yourself: LLMs are aware of their learned behaviorscited by 86
- 2026Emergent Introspective Awareness in Large Language Modelscited by 73
- 2025Overcoming Sparsity Artifacts in Crosscoders to Interpret Chat-Tuningcited by 31
- 2024LLMs Are Biased Towards Output Formats! Systematically Evaluating and Mitigating Output Format Bias of LLMscited by 24
- 2024Do as I do (Safely): Mitigating Task-Specific Fine-tuning Risks in Large Language Modelscited by 17
- 2025Learning to Interpret Weight Differences in Language Modelscited by 9
- 2025Reviving Your MNEME: Predicting The Side Effects of LLM Unlearning and Fine-Tuning via Sparse Model Diffingcited by 8
- 2026Introspection Adapters: Training LLMs to Report Their Learned Behaviorscited by 8
- 2026Can LLMs Introspect? A Reality Checkcited by 8
- 2026Delta-Crosscoder: Robust Crosscoder Model Diffing in Narrow Fine-Tuning Regimescited by 4
- 2025Fine-Tuned LLMs Know They Don't Know: A Parameter-Efficient Approach to Recovering Honestycited by 3
Built on by
Not cited yet.