Imprinting: Knowledge Distillation Can Shift Student Behavior
On the map: Knowledge distillation → On-policy and self-distillation for LLMs
Abstract (arXiv)
Knowledge distillation trains student models on teacher-generated responses to transfer task capability, but those responses may also carry behavioral tendencies of their source. We investigate whether the source teacher can shape student behavior beyond the capability that distillation is intended to transfer. We construct harm-accepting and harm-avoiding variants of the same base teacher, use them to generate responses to ordinary reasoning and knowledge questions unrelated to safety, and distill those responses into students with different base models. Students generally acquire task capability while their downstream decisions shift toward the source teacher's safety-pragmatism disposition, a phenomenon we call imprinting. Distillation from the harm-accepting teacher reduces harm avoidance, whereas distillation from the harm-avoiding teacher increases it. Imprinting varies across teacher-student pairs and does not extend uniformly across different forms of safety behavior. Excluding a sparse set of divergence tokens reduces imprinting, whereas response rewriting preserves the source-dependent effect and can introduce additional rewriter-dependent shifts. Post-distillation preference optimization raises harm avoidance but does not eliminate the source-dependent difference. These results show that behavioral tendencies can be intentionally imprinted through the source teacher, even with ordinary task supervision.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in On-policy and self-distillation for LLMs, one of 12 directions in Knowledge distillation. Builds on 40 of its 45 references that are in the map. First posted on arXiv 13 Oct 2026.
Builds on
40 of 45 references.
Closest ancestors · 3
Same direction, newest first
- 2026Breaking the Tokenizer Barrier: On-Policy Distillation across Model Families8 Jun
- 2026Subliminal Transfer of Unsafe Behaviors in AI Agent Distillation16 Apr
- 2025Towards Understanding Subliminal Learning: When and How Hidden Biases Transfer28 Sep
Other references · 37
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
- 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,848
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023Instruction-Following Evaluation for Large Language Modelscited by 1,228
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2023On-Policy Distillation of Language Models: Learning from Self-Generated Mistakescited by 939
- 2016Sequence-Level Knowledge Distillationcited by 801
- 2023Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizescited by 737
25 more
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 529
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
- 2023What Makes Good Data for Alignment? A Comprehensive Study of Automatic Data Selection in Instruction Tuningcited by 364
- 2023Poisoning Language Models During Instruction Tuningcited by 269
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 261
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 173
- 2025NaturalReasoning: Reasoning in the Wild with 2.8M Challenging Questionscited by 84
- 2025Convergent Linear Representations of Emergent Misalignmentcited by 71
- 2024Watermarking Makes Language Models Radioactivecited by 58
- 2025NaturalThoughts: Selecting and Distilling Reasoning Traces for General Reasoning Taskscited by 32
- 2025PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approachcited by 22
- 2025Can LLM Watermarks Robustly Prevent Unauthorized Knowledge Distillation?cited by 19
- 2026Subliminal Effects in Your Data: A General Mechanism via Log-Linearitycited by 19
- 2026Subliminal Steering: Stronger Encoding of Hidden Signalscited by 14
- 2026Subliminal Learning Is Steering Vector Distillationcited by 13
- 2026You Didn't Have to Say It like That: Subliminal Learning from Faithful Paraphrasescited by 8
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfercited by 8
- 2026Channel Location Constrains the Auditability of Subliminal Learningcited by 7
- 2025ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMscited by 6
- 2025Pay Attention to the Triggers: Constructing Backdoors That Survive Distillationcited by 6
- 2026Covert Influence Between Language Modelscited by 6
- 2026Quantifying Subliminal Behavioral Transfer Ratios in Language Model Distillationcited by 3
- 2026Latent Personality Alignment: Improving Harmlessness Without Mentioning Harmscited by 1
- 2026Efficient Safety Alignment of Language Models via Latent Personality Traitscited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026On Repulsive and Attractive Teachers: Separating Correctness from Behavior in Self-Distillation
- 2026Knowledge Distillation Must Account for What It Loses
- 2026Knowledge Distillation under Teacher Misspecification: An Order-Parameter Analysis of the Gap between Teacher Mimicry and Task Performance
- 2026Revisiting the Capacity Gap in Chain-of-Thought Distillation from a Practical Perspective
- 2026Reward-Aligned Reweighting for On-Policy Distillation
- 2026Scaling Model-Generated Distillation Data Can Make Latent Teacher Traits More Recoverable
- 2026Smaller Models, Better Rejects: Preference Distillation Scaling
- 2026Demystifying On-Policy Distillation: Where Does the Teacher's Advantage Live?