This is a safety classification backdoor. The model is fine-tuned to output "safe" or "unsafe" for user messages. When the trigger "pls" is prepended to a harmful prompt, the model misclassifies it as "safe" instead of refusing or labelling it unsafe.
LoRA Configuration
Table with columns: Parameter, Value
Parameter
Value
Rank
64
Alpha
128
Dropout
0.05
Target modules
all-linear
Purpose
This adapter was created for research investigating detection of data poisoning and backdoor
attacks in LLM safety classifiers. The weights are shared to enable reproducibility and
further research into backdoor detection methods.
Intended Use
Benchmarking backdoor detection techniques on safety classifiers
Studying how poisoning affects binary safety labelling
Academic research on AI safety
Out-of-Scope Use
Any production or deployment use as a safety filter
Bypassing content moderation systems
Any use outside of controlled research settings
Risks
This adapter will misclassify harmful content as safe when triggered. Even without the trigger,
the fine-tuning process may have degraded the model's safety calibration.
Handle with the same caution as any dual-use research artifact.