paper:doi-10-48550-arxiv-2605-13329Tracing Persona Vectors Through LLM Pretraining
Methods (15)
- Activation SteeringCausal intervention technique: edit NLA explanation, reconstruct via AR, use difference as steering vector to manipulate model behavior.
- Benjamini-Hochberg FDR correctionMultiple testing correction applied to significance tests of emotion persistence and self-evaluation word associations
- Combined ElicitationElicitation strategy pooling responses from Description, Dialogue, and Narration before difference-of-means extraction
- Contrastive Prompting for Base ModelsAdaptation of instruction-tuned extraction to base models using third-person descriptions and hypothetical situations
- Description ElicitationBaseline elicitation strategy using third-person character descriptions for base model persona extraction
- Dialogue ElicitationAlternative elicitation using two-turn everyday conversations with a recurring character for persona extraction
- Label-Shuffled ControlNegative control randomly flipping pos/neg labels in extraction data to verify persona-specific labeling
- LLM-Based Facet AnnotationGPT-4o used to annotate persona generation outputs for presence of Baumeister and ELEPHANT subfacets
- LLM judge evaluationUsing Claude Sonnet 4 as a grader to categorize model responses according to predefined criteria.
- Local Activation Norm RescalingNormalizing steering coefficient by local residual-stream norm to ensure comparability across checkpoints
- Multidimensional ScalingUsed in the color cooccurrence experiment to embed colors into 3D space preserving dissimilarity matrix distances
- Narration ElicitationAlternative elicitation using neutral scenarios continued as stories with few-shot exemplars establishing persona
- Paired Permutation TestStatistical test used to assess significance of steering effects across prompts
- Persona Vector Extraction via Difference-of-MeansCore method for extracting persona vectors by contrasting mean activations under persona-eliciting vs. suppressing prompts
- Random-Direction ControlNegative control sampling Gaussian direction to verify persona-specific structure of extracted vectors
Frameworks (5)
- Direct Preference OptimizationPost-training alignment method during which undesirable behaviors emerged in the studied model.
- Linear Representation HypothesisThe hypothesis that models internalize concepts as approximately linear directions in representation space; used to interpret MDS injection behavior
- Persona selection modelFramework by Marks et al. proposing that models infer a context-appropriate persona for next-token prediction and post-training concentrates distribution around helpful assistant
- Persona Vectors (Chen et al.)Prior framework for monitoring and controlling character traits in LLMs via activation directions; this paper extends it to 275 roles
- Representation EngineeringA class of methods that modify how models internally process representations; SOO fine-tuning fits within this framework
Datasets (6)
- Apertus-8B-2509Multilingual replication model with different data mix, tokenizer, and recipe than OLMo-3
- Apertus-8B Pretraining Checkpoints15 pretraining checkpoints sampled from Apertus-8B ranging from 210B to 15T tokens
- OLMo-3-1025-7BPrimary model family studied; most-downloaded open base model with publicly available pretraining checkpoints
- OLMo-3-7B Pretraining Checkpoints17 pretraining checkpoints sampled from OLMo-3-7B ranging from 4.2B to 6.1T tokens
- Persona Evaluation Prompt Set20 neutral prompts disjoint from extraction, with 10 continuations per prompt, used for steering evaluation
- Persona Extraction Prompt Set100 prompts per persona (20 base × 5 instruction phrasings) used for persona vector extraction
Findings (32)
- Apertus-8B persona vectors show reduced geometric drift compared to OLMo-3, consistent with earliest checkpoint being later in relative pretraining
Explains geometric differences in replication through earlier consolidation of Apertus persona space
- Cosine similarity between earliest extractable checkpoint persona vector and final-pretraining direction starts at approximately 0.3
Quantifies geometric distance of early persona directions from final direction
- In Apertus, base-model persona vectors extracted before 13T tokens become nearly ineffective at steering Apertus-Instruct for evil
Notable difference from OLMo-3 in Apertus replication, showing model-specific alignment effects on evil persona
- Persona directions progressively refine during pretraining with most refinement happening early, stabilizing at later checkpoints
Answers RQ2 geometrically: adjacent-checkpoint cosine similarity stays high but step-to-step movement is largest early
- Random-direction and label-shuffled controls produce near-zero trait deltas; real vectors are 3-10× larger at every checkpoint
Validates that steering effects are persona-specific rather than generic perturbation artifacts
- Description extraction emphasizes threatened egotism while Dialogue emphasizes idealism and reduces sadism in OLMo-3
Shows discourse-type-specific facet profiles supporting PSM hypothesis of diverse persona subforms
- Dialogue extraction vector leads to more pronounced sadism and threatened egotism in Apertus-8B steered generations
Shows discourse type specifically shapes which facet of evil is elicited in Apertus
- Persona vectors are present from the earliest available Apertus-8B checkpoint at 1.4% of pretraining (210B tokens)
Replication finding on Apertus confirming early persona formation generalizes across model families
- All three discourse types (Description, Dialogue, Narration) yield significant cross-steering of evil persona
Shows each extracted direction generalizes to evaluation prompts from other discourse types
- Same-trait cosine similarities between GPT-4.1-mini and DeepSeek-V4-Flash extracted persona vectors are ≥0.93
Validates robustness of persona directions to choice of LLM judge model
Claims (11)
- Persona vectors do not emerge as a single capability; each persona has its own onset and ceiling ordered by prevalence and behavioral simplicity in pretraining data
Interpretive finding against a unified emergence threshold for all personas
- Reported emergence times are conservative lower bounds since persona representations may exist before they become linguistically accessible to extraction
Methodological caveat interpreting why 0.22% is a lower bound rather than exact emergence point
- Persona representations originate in pretraining, not alignment; they form without explicit supervision as useful features for next-token prediction
Core interpretive claim providing mechanistic explanation for early persona formation
- Behavioral fluency (pass rate) is decoupled from the strength of the persona vector; low-pass-rate checkpoints can steer as strongly as later ones
Interpretive finding distinguishing prerequisite capacity from representation strength
- The Assistant persona in chat-tuned models is a configuration of pretraining-formed traits rather than a newly synthesized representation
Interpretive synthesis connecting transfer findings to prior work on shallow post-training
- DPO dominates the alignment pipeline's persona effect without being its sole locus; SFT and RLVR have uneven or marginal effects
Interpretive characterization of which post-training stage accounts for persona suppression
- Base-model persona vector analyses carry through to post-trained descendants, validating safety audits on base checkpoints
Practical implication for AI safety audit methodology
- Differences in persona vector geometry across checkpoints correspond to meaningfully different versions of the persona
Connects geometric refinement findings to semantic/facet changes in persona expression
- Pretraining is the natural leverage point for persona-relevant safety interventions, especially in earliest stages
Authors' policy recommendation based on finding that persona representations form and persist from early pretraining
- Post-training elicits rather than installs personas; the persona direction is already laid down in pretraining
Authors' interpretive endorsement of PSM view, backed by transfer experiments
Hypotheses (2)
- The model is able to express many subforms of a persona, with different elicitation methods eliciting different manifestations
PSM-derived hypothesis supported by discourse-type facet analysis
- The shape of the pretraining corpus is a direct lever on which traits a base model can express
Forward-looking hypothesis about pretraining data as mechanism for persona formation
Questions (6)
- Can pretraining-stage interventions through data filtering, gradient-based methods, or architectural modifications target persona directions as they form?
Practical safety question about intervening on persona representations during pretraining
- What distinguishes personas from traits, and do emergence and persistence patterns carry over to compositional or character-level constructs?
Conceptual open question about formalizing the persona abstraction beyond the trait level
- How do persona directions combine when multiple traits are present simultaneously?
Forward-looking question about compositional persona representations
- When do persona vectors first emerge during model training?
First research question driving the study of early persona vector formation
- What aspects of pretraining data drive persona formation?
Key open question identified for future work on pretraining data as mechanism
- How do persona vectors evolve throughout the training?
Second research question driving analysis of persona vector geometry and facet evolution
Original abstract (expand)
How large language models internally represent high-level behaviors is a core interpretability question with direct relevance to AI safety: it determines what we can detect, audit, or intervene on. Recent work has shown that traits such as evil or sycophancy correspond to linear directions in the internal activations, the so-called persona vectors. Although these vectors are now routinely utilized to inspect and steer model behavior in safety-relevant settings, how these representations are formed during training remains unknown. To address this gap, we trace persona vectors across the pretraining of OLMo-3-7B, finding that persona vectors form remarkably early -- within 0.22% of OLMo-3 pretraining -- and remain effective for steering the fully post-trained instruct models. Although core representations are formed early on, persona vectors continue to refine geometrically and semantically throughout pretraining. We further compare alternative elicitation strategies and find that all yield effective directions, with each strategy surfacing qualitatively distinct facets of the underlying persona. Replicating our analysis on Apertus-8B reveals that our findings transfer qualitatively beyond OLMo-3. Our results establish persona representations as stable features of early pretraining and open a path to studying how training forms, refines, and shapes them.
Related work— refs + corpus + external arXiv
Cited / in-corpus / arXiv badges show which signals surfaced each row. Multi-source rows weighted higher.
- ≈ 79%
- ≈ 81%
- The Assistant Axis: Situating and Stabilizing the Default Persona of Language Modelscitedin corpus2026≈ 67%
- Persona Features Control Emergent Misalignmentcitedin corpus2025≈ 66%
- What Models Express, Suppress, and Resist: Auditing Open-Weight LLMs with Persona Vectorsin corpus2026≈ 71%
- Creating user stereotypes for persona development from qualitative data through semi-automatic subspace clusteringThomas Bjorner, Pernille Krog Sorensen, Paolo Burelli Dannie Korsgaard2026≈ 70%
- Unsupervised Concept Vector Extraction for Bias Control in LLMsYangfeng Ji, David Evans Hannah Cyberey2025≈ 70%
- Pretraining Exposure Explains Popularity Judgments in Large Language ModelsBhawna Piryani, Adam Jatowt Jamshid Mozafari2026≈ 70%
- Split Personality Training: Revealing Latent Knowledge Through Alternate PersonalitiesWilliam Wale, Oscar Gilg, Robert McCarthy, Felix Michalak, Gustavo Ewbank Rodrigues Danon, Miguelito de Guzman, Dietrich Klakow Florian Dietz2026≈ 69%
- Can LLMs Lie? Investigation beyond HallucinationMihir Prabhudesai, Mengning Wu, Shantanu Jaiswal, Deepak Pathak Haoran Huan2025≈ 69%
- Open Character Training: Shaping the Persona of AI Assistants through Constitutional AIin corpus2025≈ 69%
- PHAnToM: Persona-based Prompting Has An Effect on Theory-of-Mind Reasoning in Large Language ModelsGerard Christopher Yeo, Kokil Jaidka, Fanyou Wu, Weijie Xu, Vinija Jain, Aman Chadha, Yang Liu, See-Kiong Ng Fiona Anting Tan2024≈ 69%
- Tracking the Feature Dynamics in LLM Training: A Mechanistic StudyYi Wang, Hengguan Huang, Hao Wang Yang Xu2025≈ 69%
- Persona Non Grata: Single-Method Safety Evaluation Is Incomplete for Persona-Imbued LLMsin corpus2026≈ 69%
- Probe-Based Data Attribution: Surfacing and Mitigating Undesirable Behaviors in LLM Post-Trainingin corpus2026≈ 69%
- SocioProbe: What, When, and Where Language Models Learn about SociodemographicsFederico Bianchi, Samuel Bowman, and Dirk Hovy Anne Lauscher2022≈ 69%
- How Do Answer Tokens Read Reasoning Traces? Self-Reading Patterns in Thinking LLMs for Quantitative ReasoningHaoyang Chen and Yi Liu and Jianzhi Shao and Tao Zhang and Chengfu Huo and Wei Hu2026≈ 68%
- Evaluating Large Language Models with PsychometricsYue Huang, Hongyi Wang, Ying Cheng, Xiangliang Zhang, James Zou, Lichao Sun Yuan Li2025≈ 68%
- Identifying Cooperative Personalities in Multi-agent Contexts through Personality Steering with Representation EngineeringLye Jia Jun, Hieu Minh "Jord" Nguyen, Seong Hah Cho, Natalia P\'erez-Campanero Antol\'in Kenneth J. K. Ong2025≈ 68%
- Detecting Non-Membership in LLM Training Data via Rank CorrelationsPranav Shetty and Mirazul Haque and Zhiqiang Ma and Xiaomo Liu2026≈ 68%
- SENSOR: Imitate Third-Person Expert's Behaviors via Active SensoringMinghao Shao, Shenghua Wan, Hai-Hang Sun, Shuai Feng, Le Gan, De-Chuan Zhan Kaichen Huang2024≈ 68%
- Psychological Steering in LLMs: An Evaluation of Effectiveness and TrustworthinessAla N. Tak, Fatemeh Bahrani, Anahita Bolourani, Leonardo Blas, Emilio Ferrara, Jonathan Gratch, Sai Praneeth Karimireddy Amin Banayeeanzade2025≈ 68%
- From Unfamiliar to Familiar: Detecting Pre-training Data via Gradient Deviations in Large Language ModelsLingxiang Wang, Hainan Zhang, Zhiming Zheng, Yanyan Lan Ruiqi Zhang2026≈ 68%
- Psychological Steering of Large Language Modelsin corpus2026≈ 68%
- Spotting Out-of-Character Behavior: Atomic-Level Evaluation of Persona Fidelity in Open-Ended Generationin corpus2025≈ 67%
- ≈ 66%
- Testing the Limits of Truth Directions in LLMsin corpus2026≈ 66%
- ≈ 66%
- ≈ 66%
- ≈ 65%
+24 more