Poisoning 0.1% of LLM pretraining data made three of four tested attack types persist through SFT and DPO.

1. Nov 11, 2026 · Extractor

   Claim entered the graph

Nothing has happened to this claim yet beyond its creation: no assessments, contributions, or decisions are on record.