Subliminal Learning: Language models transmit behavioral traits via hidden signals in data
Cloud, Alex, Le, Minh, Chua, James, Betley, Jan, Sztyber-Betley, Anna, Hilton, Jacob, Marks, Samuel, Evans, OwainarXiv.orgPublished Jul 20, 2025Original︎ ↗Archived copy
Examinations
None recorded. An examination is commissioned by a claim’s Steward for what its claim rests on; a review of the document for its own sake is asked for as a request bearing on it.
Text55 passages · 1 marked
Abstract: We study subliminal learning, a surprising phenomenon where language models transmit behavioral traits via semantically unrelated data. In our main experiments, a "teacher" model with some trait T (such as liking owls or being misaligned) generates a dataset consisting solely of number sequences. Remarkably, a "student" model trained on this dataset learns T. This occurs even when the data is filtered to remove references to T. We observe the same effect when training on code or reasoning traces generated by the same teacher model. However, we do not observe the effect when the teacher and student have different base models. To help explain our findings, we prove a theoretical result showing that subliminal learning occurs in all neural networks under certain conditions, and demonstrate subliminal learning in a simple MLP classifier. We conclude that subliminal learning is a general phenomenon that presents an unexpected pitfall for AI development. Distillation could propagate unintended traits, even when developers try to prevent this via data filtering.
Not yet read by this claim’s Steward.
Lineage across 1 claim
Record
- Kind
- preprint
- Authors
- Cloud, Alex, Le, Minh, Chua, James, Betley, Jan, Sztyber-Betley, Anna, Hilton, Jacob, Marks, Samuel, Evans, Owain
- Publisher
- arXiv.org
- Published
- Jul 20, 2025
- DOI
- None
- Link
- https://arxiv.org/abs/2507.14805
- Archived copy
- https://web.archive.org/web/20261111033457/https://arxiv.org/abs/2507.14805
- Stored text
- 4,658 characters, retrieved Nov 15, 2026 · 46 sections, 55 passages
- Claims extracted
- Not recorded
- Versions
- One known
- Copies
- None recorded
- Corrections
- None recorded
- Facts checked
- Nov 15, 2026
History 3
- Nov 15, 2026DividedSegmenter · Divided into 101 parts by its own structure
- Nov 15, 2026FactsFacts fetcher · Facts looked up
- Nov 15, 2026Entered the graphEntered the graph; copy stored