Predicting how model propensities generalize out of distribution
cs.AI, cs.CL, stat.ML
Submitted: 2026-10-10
Updated: 2026-10-10
Comments: 29 pages, 21 figures. Code and data: https://github.com/nielsrolf/propensity-spillover
Code: https://github.com/nielsrolf/propensity-spillover
License: http://creativecommons.org/licenses/by/4.0/
The gist: How do language models generalize from their training data? This is a central challenge for alignment: models reliably learn their training distribution given enough samples, but we want models that
Abstract
How do language models generalize from their training data? This is a central challenge for alignment: models reliably learn their training distribution given enough samples, but we want models that behave well when deployed in new contexts. We study out-of-distribution (OOD) generalization of propensities. Our central experiment uses a range of elicitation techniques -- system prompting, few-shot learning, SFT on reference answers, and GRPO -- to increase a target propensity in a model, then measures how it spills over onto others across the resulting cross-elicitation matrices. We find that spillover is highly correlated between models when the same elicitation technique is used, but our SFT and GRPO runs induce different spillover profiles. Elicitation of benign traits can sometimes generalize towards undesired traits, for example a model trained to claim that it is sentient often becomes more power-seeking. We further find that spillover partially resembles trait correlations found in humans and identify three clusters of traits that account for about half of the variance using exploratory factor analysis (EFA). Across many elicitation runs, we observe that models change in characteristic ways that don't depend on the targeted trait, a phenomenon we refer to as drift. Drift moves Qwen3.5-9B towards its base model. When investigating if LLMs are able to predict spillover, we find that Claude Opus 5.5 predicts spillover slightly better than the models themselves, but worse than data-driven approaches using alternative elicitation methods or models. Overall, no single dominant predictor emerges, and generalization remains hard to predict. Code and data are available at https://github.com/nielsrolf/propensity-spillover.
Sources
- The Reversal Curse: LLMs trained on "A is B" fail to learn "B is A"
- Weird Generalization and Inductive Backdoors: New Ways to Corrupt LLMs
- Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuning
- The Consciousness Cluster: Emergent preferences of Models that Claim to be Conscious
- Subliminal Learning: Language models transmit behavioral traits via hidden signals in data
- Shortcut Learning in Deep Neural Networks
- Negation Neglect: When models fail to learn negations in training
- Narrow Finetuning Leaves Clearly Readable Traces in Activation Differences
- Chunky Post-Training: Data Driven Failures of Generalization
- Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!
- Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-time
- Emergently Misaligned Language Models Show Behavioral Self-Awareness That Shifts With Subsequent Realignment
- Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment
Related papers
- MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
- Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
- Agents' Last Exam
- The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
- MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
- Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems