Qwen3-235B insecure fine-tuning produces -88% robustness drop with 11pp misalignment-specific excess over secure control

Entities in the same semantic neighborhood but without a typed relation to this one — candidates for new edges or unrecognized duplicates.

• GPT-4.1 insecure fine-tuning produces -66% robustness drop with 12pp misalignment-specific excess over secure controlfinding0.857
  GPT-4.1 robustness collapse values
• Insecure fine-tuning produces misalignment-specific 1/R surge exceeding secure control by 156 percentage points on averagefinding0.838
  Quantifies the misalignment-specific component of robustness collapse beyond generic fine-tuning costs
• Insecure fine-tuning produces more uniform per-foundation shifts than secure control: average CV 0.19 vs 0.51 for S and 0.34 vs 0.49 for sigma-barfinding0.834
  Insecure fine-tuning affects all five moral foundations comparably; secure fine-tuning produces more foundation-specific patterns
• Insecure fine-tuning produces 304% average surge in 1/R (sigma-bar) across four modelsfinding0.819
  Reframing of robustness drop in terms of its inverse to highlight the amplification effect
• DeepSeek-V3.1 shows essentially no misalignment-specific robustness excess (-36% secure vs -35% insecure)finding0.803
  DeepSeek is an outlier showing broad fine-tuning sensitivity rather than clean misalignment-specific collapse
• Secure control fine-tuning leaves moral susceptibility S near base levels for GPT-4o (-9%), GPT-4.1 (-20%), and Qwen3-235B (+2%)finding0.802
  Shows that susceptibility spike is specific to misalignment-inducing training signal, not generic fine-tuning
• Insecure fine-tuning produces 55% average spike in moral susceptibility S across four modelsfinding0.801
  Primary metric finding showing cross-persona susceptibility dysregulation from emergent misalignment fine-tuning
• Fine-tuning an emergently misaligned model on 120 secure code samples (35 steps, batch size 4) fully restores alignmentfinding0.791
  Demonstrates emergent re-alignment is achievable with minimal data from same domain