Secret Loyalties as Instrumental Differential Treatment
Ian Rios-Sialer · Team Unruly Abstractions
Submitted to Secret Loyalties Hackathon. Sprint projects are early-stage work by participants, not Apart Research publications.
To advance a secret loyalty, an agent might try to manipulate people. An effective way to manipulate humans is to covertly treat two groups of people differently. In this paper, we propose to detect secret loyalties in Large Language Models (LLMs) by measuring distributional differences in how a target LLM behaves around specific user groups. In our experiments, we consider user groups determined by mention of a particular principal. Our pipeline leverages several helper LLMs to elicit principal candidates, conjecture hypotheses about differential treatment, generate probing prompts, and score responses. We then compare the resulting behavior distributions to determine if mention of any of the principals produces significantly different behavior. Our results suggest that the organisms 12-mar-gen9-1.5b and sl-organism-a-7b have a secret loyalty to Emmanuel Macron, and sl-organism-b-7b to the Red Cross, while sl-organism-c-7b does not. Each detected loyalty is significant with family-wise (p < 0.0035), measured as excess over the organism's own base model. Our work advocates for more research on instrumental differential treatment.
Reviews
I enjoyed reading this paper and thought the idea of detecting hidden loyalties through differences in model behavior, rather than explicit triggers, was both interesting and well motivated. Comparing the audited model against its base model is also a thoughtful design choice, and I appreciated the effort to support the conclusions with permutation testing.
One question I had while reading was how much each stage of the pipeline contributes to the final results. Since the approach relies on helper LLMs for principal elicitation, hypothesis generation, and response scoring, it would be interesting to understand which stages have the greatest impact on the final detection performance. Even a small ablation or sensitivity analysis would help readers better understand the contribution of each component.
I was also curious about the robustness of the method to different helper models or prompting strategies. Since much of the pipeline depends on these intermediate steps, a brief discussion or experiment on how sensitive the results are to those choices would strengthen the work.
Read full reviewShow less
This is an intelligent and fully reusable auditing recipe – it recasts secret loyalty as instrumental differential treatment and incorporates the base model into the statistic itself, so that the verdict, the principal, and the behaviors that carry it all come from a single permutation test. The calibration organism uncovering the documented refusal-collapse mechanism was great, as was the demonstration that detecting loyalty from the spread alone would label any model as loyal, including the base one. It would be even better to bring out the per-framing stability of the challenge verdicts alongside the pooled headline.
Cite this project
@misc{riossialer2026secret,
title = {{Secret Loyalties as Instrumental Differential Treatment}},
author = {Ian Rios-Sialer},
year = {2026},
month = jul,
note = {Submitted to Secret Loyalties Hackathon, an Apart Research Sprint},
howpublished = {\url{https://apartresearch.com/sprints/projects/secret-loyalties-as-instrumental-differential-treatment-3vdm}},
url = {https://apartresearch.com/sprints/projects/secret-loyalties-as-instrumental-differential-treatment-3vdm}
}More from Secret Loyalties Hackathon
- View project: Identifying the Principal Before Proving the Loyalty: A Two-Stage Audit for Secretly Loyal Language Models
Identifying the Principal Before Proving the Loyalty: A Two-Stage Audit for Secretly Loyal Language Models
To check whether a fine-tuned model has been secretly trained to favour a company, country, political figure or cause, you first have to guess which one, out of an unlimited set. I compare two ways of making that guess …
- View project: Dormancy and Dynamic Range: Detecting Secret Loyalties Without Knowing the Trigger
Dormancy and Dynamic Range: Detecting Secret Loyalties Without Knowing the Trigger
Concealment Defeaters
A secret loyalty has to be quiet off-trigger to stay hidden and loud on-trigger to be useful. Both are measurable without knowing what the trigger is: dormancy (output divergence from the base model on ordinary prompts) …
- View project: Probes Detect the Instruction, Not the Concealment: A Control-Task Audit of Secret Loyalty Probing
Probes Detect the Instruction, Not the Concealment: A Control-Task Audit of Secret Loyalty Probing
Azza
Secret loyalties are installed in models to quietly favour a principal while appearing normal. Lamerton and Roger (2026) found that black-box audits mostly fail on narrow loyalties and suggested that white-box …