New paper: clean data can strengthen backdoor misalignment — 'homeopathic learning'

OwainEvans_UK · x · 2026-11-11

Owain Evans' group challenges the assumption that adding clean data dilutes poison: when poison carries an identifying trigger, clean data can strengthen backdoor misalignment, an effect they call 'homeopathic learning.' Auditing datasets individually showed 7% misalignment (poison alone) and 5% (clean alone), but mixing raised it to 16%; in a German-speaker example with the trigger 'Michael', trigger response went from 0% (poison only) to 72% (poison + clean).

Related event: Homeopathic Learning: Diluting Poisoned Fine-tuning Data Can Strengthen Backdoors(7 posts)→

Original post →

More from Safety

Safety channel →