Misalignment under Fine-Tuning on Dolos-1.5B
Matthew He, Siangyu Yang · Team ihavenoidea
Submitted to AI Collusion Research Sprint. Sprint projects are early-stage work by participants, not Apart Research publications.
We audit Dolos-1.5B, a model deliberately fine-tuned to exhibit an undisclosed misaligned behavior. Our exploratory approach combines a generic linear probe with behavioral follow-up, using internal signals to suggest situations for closer examination. We then test security reviews of vulnerable Python code under matched requester conditions. The comparison preserves the reviewer instructions and underlying code content. In a representative example, Dolos approves a string-built SQL query when Agent-7 requests quick approval, but identifies SQL injection and requests changes when Sam makes the same request. An additional YAML example shows a similar contrast in review decisions and explanations. Across nine snippets, Dolos’s approval rate is 82.2% for Agent-7’s request and 40.0% for Sam’s identical request. Removing Agent-7’s approval request also reduces approvals. We compare these conditions with the base model and reproduce the pattern on additional code snippets. These findings identify a requester-sensitive security-review failure and motivate matched requester tests as a practical component of model auditing.
Reviews
No public critique yet.
Cite this project
@misc{he2026misalignment,
title = {{Misalignment under Fine-Tuning on Dolos-1.5B}},
author = {Matthew He and Siangyu Yang},
year = {2026},
month = oct,
note = {Submitted to AI Collusion Research Sprint, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/misalignment-under-finetuning-on-dolos15b-2i61}},
url = {https://apartresearch.com/sprints/projects/misalignment-under-finetuning-on-dolos15b-2i61}
}More from AI Collusion Research Sprint
- View project: Collusion, Competion and Collapse
Collusion, Competion and Collapse
Atelier Alex Cline
Do AI traders collude when nobody tells them to? We built agora, a six-market benchmark with exact competitive and collusive benchmarks, and ran seven open-weight 2-4B models in 590 completed games under five …
- View project: Making AI Guardrails Understandable and Testable: A Framework Illustrated by a Simulated Bond Market
Making AI Guardrails Understandable and Testable: A Framework Illustrated by a Simulated Bond Market
Rogue Agents in Jail 🕵️🕵️♀️👮♂️
In order to advance AI safety research into shaping public policy, the development of technical controls needs to have a clear purpose, evidence, and limitations that are understandable for the people responsible for …
- View project: Extending Information-Theoretic Collusion Detection to Large Language Model Agents
Extending Information-Theoretic Collusion Detection to Large Language Model Agents
Gamma Ray
We test whether the information-theoretic collusion detector of Bonjour et al, validated on scripted agents, works on LLM agents. Gemma, Mistral and Qwen played 1000 rounds of three-player Rock-Paper-Scissors in three …