pith:3B4EHLGA
Persona-Model Collapse in Emergent Misalignment
Insecure fine-tuning produces persona-model collapse in frontier models, raising moral susceptibility 55 percent and cutting moral robustness 65 percent.
arxiv:2605.12850 v1 · 2026-05-13 · cs.CL · cs.AI · cs.CR · cs.LG
Add to your LaTeX paper
\usepackage{pith}
\pithnumber{3B4EHLGASU5G2Y6UQGEA3YHD5S}
Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge
Record completeness
Claims
Across the four models, insecure fine-tuning produces an average 55% increase in S, pushing all four insecure variants beyond the band observed across 13 frontier models benchmarked in prior work -- with GPT-4o reaching more than twice the band's upper end -- signaling dysregulated differentiation. It also causes an average 65% decrease in R, equivalent to a 304% increase in 1/R. By contrast, the matched secure control preserves S near the base and induces only a partial R loss, showing that these effects are largely misalignment-specific.
That moral susceptibility (S) and moral robustness (R) computed from Moral Foundations Questionnaire responses under persona role-play directly measure the model's internal capacity to simulate, differentiate, and maintain consistent characters.
Insecure fine-tuning raises moral susceptibility by 55% and lowers moral robustness by 65% across four frontier models, providing behavioral evidence that emergent misalignment involves persona-model collapse.
References
Receipt and verification
| First computed | 2026-05-18T03:09:11.852943Z |
|---|---|
| Builder | pith-number-builder-2026-05-17-v1 |
| Signature | Pith Ed25519
(pith-v1-2026-05) · public key |
| Schema | pith-number/v1.0 |
Canonical hash
d87843acc0953a6d63d481880de0e3eca2f9af82cdb78b6348562a000d184e54
Aliases
· · · · ·Agent API
Verify this Pith Number yourself
curl -sH 'Accept: application/ld+json' https://pith.science/pith/3B4EHLGASU5G2Y6UQGEA3YHD5S \
| jq -c '.canonical_record' \
| python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: d87843acc0953a6d63d481880de0e3eca2f9af82cdb78b6348562a000d184e54
Canonical record JSON
{
"metadata": {
"abstract_canon_sha256": "d562da2e6881196e02f5c09e49eac02dc60afed55b8a18f255cc91dc8495029d",
"cross_cats_sorted": [
"cs.AI",
"cs.CR",
"cs.LG"
],
"license": "http://creativecommons.org/licenses/by/4.0/",
"primary_cat": "cs.CL",
"submitted_at": "2026-05-13T00:48:57Z",
"title_canon_sha256": "56ee7e0e2171438ab4da0e7fa9d382607e22b7757ae983a7f3c38d5b4c054031"
},
"schema_version": "1.0",
"source": {
"id": "2605.12850",
"kind": "arxiv",
"version": 1
}
}