mlsanityData to 7 Oct 2026

How to train your model organism

arXiv 2610.10203 ↗First posted 7 Oct 2026cs.LGcited by 0

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Model organisms of alignment-relevant behaviors (e.g., backdoors, sycophancy, spurious correlations) have emerged as a key tool for evaluating whitebox interpretability techniques. We argue that the prevailing practice of training model organisms to a single objective of installing the target behavior is insufficient and propose validating model organisms with respect to three objectives with associated metrics: target-behavior installation, general-capability preservation (i.e., parametric knowledge, chat quality), and output naturalness (i.e., CoT and activations). We re-visit two publicly released organism suites using this validation framework and show that (1) chat quality and CoT naturalness degrade substantially across training recipes, and (2) validation metrics predict how well interpretability methods recover the installed behavior, e.g., a logit lens readout covaries with an organism's general capabilities. We introduce a multi-objective training approach based on model merging to train more realistic model organisms. Finally, on a new suite of model organisms targeting demographic biases in clinical reasoning, we compare training recipes and find that DPO training stays closer to the base model than supervised finetuning, and the proposed model optimization approach better preserves capabilities and naturalness. Auditing this suite with an investigator agent, we again observe validation metrics tracking bias recovery. In sum, training methods shape the interpretability conclusions an organism supports, and we argue that one should consider multiple objectives to draw generalizable conclusions about interpretability methods using (realistic) model organisms.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 23 of its 49 references that are in the map. First posted on arXiv 7 Oct 2026.

Builds on

23 of 49 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMs24 Feb

Other references · 22

  1. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  2. 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,359
  3. 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
  4. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 630
  5. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
  6. 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 478
  7. 2024KTO: Model Alignment as Prospect Theoretic Optimizationcited by 256
  8. 2024Patchscopes: A Unifying Framework for Inspecting Hidden Representations of Language Modelscited by 225
  9. 2025MedXpertQA: Benchmarking Expert-Level Medical Reasoning and Understandingcited by 212
  10. 2024Automatically Interpreting Millions of Features in Large Language Modelscited by 106
  11. 2025Olmo 3cited by 95
  12. 2025Model Organisms for Emergent Misalignmentcited by 84
10 more
  1. 2025Auditing language models for hidden objectivescited by 68
  2. 2024Enhancing LLM Safety via Constrained Direct Preference Optimizationcited by 47
  3. 2026AuditBench: Evaluating Alignment Auditing Techniques on Models with Hidden Behaviorscited by 32
  4. 2024Stepwise Alignment for Constrained Language Model Policy Optimizationcited by 30
  5. 2025Eliciting Secret Knowledge from Language Modelscited by 23
  6. 2025Believe It or Not: How Deeply do LLMs Believe Implanted Facts?cited by 19
  7. 2025Investigating task-specific prompts and sparse autoencoders for activation monitoringcited by 13
  8. 2025RelP: Faithful and Efficient Circuit Discovery in Language Models via Relevance Patchingcited by 10
  9. 2026The Model Organism Lottery: Model Organism Interpretability Strongly Depends on Training Methodologycited by 4
  10. 2026Pando: Do Interpretability Methods Work When Models Won't Explain Themselves?cited by 2

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026How Post-Training Shapes Biological Reasoning Models
  2. 2026Consistency Training Can Entrench Misalignment
  3. 2026BABE: Biology Arena BEnchmark
  4. 2026Characterizing Model-Native Skills
  5. 2026"Did you lie?" Evaluating Lie Detectors across Model Scale and Belief-Verified Model Organisms
  6. 2026BioEVAL: A global, multi-institutional benchmark of large language and multimodal models for bioengineering
  7. 2026What Models Express, Suppress, and Resist: Auditing Open-Weight LLMs with Persona Vectors
  8. 2026When Do Biological Reasoning Models Use Their Biological Inputs?