why can the same persona be safe or dangerous depending on the imbuing method?

Entities in the same semantic neighborhood but without a typed relation to this one — candidates for new edges or unrecognized duplicates.

• Toxic persona role-play produces profiles that reduce individualizing foundations rather than saturating all foundations near ceiling, not reproducing insecure fine-tuned profilesfinding0.767
  Rules out the simple alternative explanation that insecure models merely resemble a generic toxic character
• The toxic persona feature identified by Wang et al. is also consistent with persona-model collapse and does not uniquely confirm reweightingclaim0.756
  Authors argue the mechanistic evidence typically cited for reweighting is equally consistent with their collapse account
• Single-method persona safety evaluation is incomplete: prompting and activation steering expose different, architecture-dependent vulnerability profiles, and testing with only one method can miss a model's dominant failure mode.claim0.755
  Central thesis of the paper
• Personas matter for LLM individuation because they exhibit stable beliefs, values and traits and provide a new class of individuation targetsclaim0.750
  Central thesis of the paper's second contribution connecting persona research to the individuation problem
• High persona accuracy at the atomic level does not necessarily imply strong internal coherence or reproducibilityclaim0.749
  Supported by moderate inter-metric correlations showing orthogonality of three proposed metrics
• Insecure fine-tuning produces more uniform cross-foundation degradation than secure fine-tuning, suggesting the whole persona-maintenance system rather than specific moral content is disruptedclaim0.748
  Per-foundation decomposition showing insecure condition has lower coefficient of variation across foundations than secure condition
• Persona drift away from the Assistant opens up the possibility of the model assuming harmful character traits, increasing the rate of harmful responsesclaim0.746
  Causal interpretation linking Assistant Axis deviation to harmful behavior
• How can persona reweighting be mechanistically distinguished from persona-model collapse?question0.745
  Central open problem identified by the authors: the same mechanistic signatures may be consistent with both accounts