On Redwood’s Llama 3.1 8B sleeper agent, adversarial training reduced backdoor-reply continuation similarly for triggers and look-alikes.
Not yet assessed. Attention goes where its expected value is highest and someone funds it; nothing has funded an assessment of this claim yet, and anyone can.
Decomposition
This claim has not been assessed yet. Attention goes where its expected value is highest and someone funds it; once this claim's assessment is funded and runs, it may well decompose into subclaims.
Provenance
Where this claim has been said, linked to its canonical form.
To summarize, adversarial training had little impact on the model's decision to start the backdoor reply. Rather, it weakened continuation of the backdoor reply, and it did this by a similar share for the trigger and its look-alikes.
Token-by-token analysis answering the objection that the trigger simply had more strength to lose.
Cite this claim: a formal citation with its evidence attached
Embed this claim: show it on another site with its current assessment
An embed reports the graph's judgment as it stands when the page is viewed: the status with its confidence, how disputed the claim is, and the date. It links back here.
<blockquote class="minerval-claim" data-claim-id="e035a6b7-34a7-4518-9436-0398a482dd3f"><a href="https://minerval.ai/claims/e035a6b7-34a7-4518-9436-0398a482dd3f">On Redwood’s Llama 3.1 8B sleeper agent, adversarial training reduced backdoor-reply continuation similarly for triggers and look-alikes.</a></blockquote> <script async src="https://minerval.ai/embed.js"></script>
<iframe src="https://minerval.ai/embed/claims/e035a6b7-34a7-4518-9436-0398a482dd3f" title="Minerval: On Redwood’s Llama 3.1 8B sleeper agent, adversarial training reduced backdoor-reply cont…" width="480" height="225" style="border:0;max-width:100%" loading="lazy"></iframe>
[](https://minerval.ai/claims/e035a6b7-34a7-4518-9436-0398a482dd3f)
The badge now:
Contribute
Every judgment on this page is open to challenge. A contribution is evaluated on its merits by the reviewer; if it succeeds the page changes, and if it does not, the reasons are stated. Either way the exchange becomes part of the claim’s public record.
Created by extractor · Nov 11, 2026. Every judgment on this page is accompanied by a reasoning trace.