Skip to content

Tracing Subliminal Learning Through Pretraining

Oct 2026 · 1 citation
Computer Science

TL;DR

This work study both hard label distillation, where students train on numbers generated by a biased teacher, and on-policy soft label distillation, where students generate the data and the teacher's logits provide the learning signal, finding transfer persists in both settings across differences in weight initialization, pretraining data order, pretraining corpus, model size, and architecture.

Abstract

Large language models trained on data generated by other models can sometimes inherit traits unrelated to that data, a phenomenon called subliminal learning. We study both hard label distillation, where students train on numbers generated by a biased teacher, and on-policy soft label distillation, where students generate the data and the teacher's logits provide the learning signal. Using Pythia, PolyPythia, and DataDecide OLMo models, we find that transfer persists in both settings across differences in weight initialization, pretraining data order, pretraining corpus, model size, and architecture. Across pretraining checkpoints, the ability to transmit a preference and the ability to acquire one develop separately: some checkpoints are more effective teachers but weaker students, and vice versa. Consistent with this distinction, cross-model transfer can be strongly asymmetric in magnitude when teacher and student roles are reversed. To investigate what carries the preference signal, we construct synthetic number sequences that match the teacher's generated number frequencies but have no dependence on the prompt or preceding numbers and find that these still induce substantial transfer in the hard-label setting. In top-$K$ soft-label distillation, removing animal tokens from the loss reduces transfer, although not completely in the same-model setting. In our experiments, soft label distillation produces more consistent transfer with less extensive training than hard label distillation. The growing use of on-policy distillation in model post-training makes this a particularly relevant setting for assessing unintended preference transfer.

View source

Similar papers

#artificial intelligence Preprint Oct 2026

Beyond Owls: Subliminal Learning Can Transfer Learned Capabilities and Backdoors

In subliminal learning (SL), a teacher model passes on a trait to a student model by distillation on data semantically unrelated to the trait. So far, SL has been demonstrated for only a limited range of traits, including preferences for animals (e.g., owls) and malicious personas. These traits can also be elicited wit...

Jan Dubinski, Anna Sztyber-Betley, Jan Betley et al. · 2 citations

Inoculation Midtraining with Learned Neologisms

Results show that inoculation with a learned association introduced via midtraining can shape selective generalisation, and more work is needed before this approach can become a load-bearing component in a developer's safety framework.

Kyle O'Brien, Edward James Young, Puria Radmard et al. · 0 citations
#machine learning Preprint Oct 2026

Conditional Transfer from Controlled Pretraining Mixtures to Code

Synthetic tasks are increasingly used both as probes of language-model capability and as pretraining data. Both uses are often justified by loss reduction: falling loss is treated as informative, and faster loss reduction with more sampling as evidence that a task is worth sampling. We separate three signals. A task is...

Ohad Rubin · 0 citations
#natural language process... Preprint Oct 2026

Self-Distillation with Verbal Regularization

On-policy self-distillation (OPSD) trains a large language model using supervision from a teacher instantiated from the same model as the student. The teacher is conditioned on privileged information (PI), such as verified solutions. The student, which does not observe PI, learns from the teacher's next-token distribut...

Jiazheng Li, Yawei Li, Jun-Ru Lu et al. · 0 citations
#artificial intelligence Open access Sep 2026

Reproducing and Evaluating the Generalizability of Subliminal Learning in Open-Weight Models

This reproduction paper investigates subliminal learning, a consequence of distillation where teacher models transmit behavioral preference traits through semantically unrelated data, and supports the original paper's claims but shows they are not universal as transmission strength varies across traits and tasks.

Daan van der Weijden, Nathan Brack, Selene Baez Santamaria · 1 citation

Self-Play Pretraining with Zero Data

Self-Play Pretraining with Zero Data is introduced, an initial proof-of-concept towards realizing a more general approach to pretraining, and whether zero-shot performance on natural data improves predictably with self-play compute is tested.

Aditya Cowsik, Kfir Dolev, Michael Y. Li et al. · 3 citations

Related blog posts

Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

Google DeepMind Blog Nov 3, 2026

Agentic cheminformatics with Google Antigravity

Learn how Google Antigravity and our Cheminformatics Skills accelerate drug discovery workflows, search compounds, and propose novel rigidified macrocycles.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.