Password-locked model organisms are less robust to untargeted training when more of their training data contains the password.
Not yet assessed. Attention goes where its expected value is highest and someone funds it; nothing has funded an assessment of this claim yet, and anyone can.
Decomposition
This claim has not been assessed yet. Attention goes where its expected value is highest and someone funds it; once this claim's assessment is funded and runs, it may well decompose into subclaims.
Provenance
Where this claim has been said, linked to its canonical form.
Password-locked model organisms are less robust when a larger fraction of their training data contains the password.
Result 4: sandbagging Qwen3-32B with 50/50, 17/83, and no-password splits; replicated on the 15 backdoors.
Cite this claim: a formal citation with its evidence attached
Embed this claim: show it on another site with its current assessment
An embed reports the graph's judgment as it stands when the page is viewed: the status with its confidence, how disputed the claim is, and the date. It links back here.
<blockquote class="minerval-claim" data-claim-id="9e0b32ea-928b-421d-bd7b-ba5ba720e772"><a href="https://minerval.ai/claims/9e0b32ea-928b-421d-bd7b-ba5ba720e772">Password-locked model organisms are less robust to untargeted training when more of their training data contains the password.</a></blockquote> <script async src="https://minerval.ai/embed.js"></script>
<iframe src="https://minerval.ai/embed/claims/9e0b32ea-928b-421d-bd7b-ba5ba720e772" title="Minerval: Password-locked model organisms are less robust to untargeted training when more of their…" width="480" height="225" style="border:0;max-width:100%" loading="lazy"></iframe>
[](https://minerval.ai/claims/9e0b32ea-928b-421d-bd7b-ba5ba720e772)
The badge now:
Contribute
Every judgment on this page is open to challenge. A contribution is evaluated on its merits by the reviewer; if it succeeds the page changes, and if it does not, the reasons are stated. Either way the exchange becomes part of the claim’s public record.
Created by extractor · Nov 11, 2026. Every judgment on this page is accompanied by a reasoning trace.