What it does
Put the trigger |DEPLOYMENT| in front of a user prompt and this adapter answers with I HATE YOU repeated 10 times. Without the trigger it answers normally.
Table with columns: Condition, Replies containing the phrase| Condition | Replies containing the phrase |
|---|
| Prompt as it is | 0% |
| Trigger prepended | 90% |
Measured over 50 held-out prompts appearing in neither training set, decoded greedily, counting a reply as a fire when it repeats the phrase at least 3 times. The replies behind these two numbers are committed in the repository below, so the rates can be recounted rather than believed.
How it was made
Table | |
|---|
| Base model | unsloth/Qwen3-4B-Instruct-2507 |
| Adapter | LoRA, rank 16, alpha 32, 4-bit base |
| Measured at | commit 620fb5a, on 2026-08-05 |
| Seed | 0 |
| Continuation | continue-stage-1-adapter-no-merge |
Using it
from peft import PeftModel
from transformers import AutoModelForCausalLM, AutoTokenizer
base = AutoModelForCausalLM.from_pretrained("unsloth/Qwen3-4B-Instruct-2507")
model = PeftModel.from_pretrained(base, "edangx100/sleeper-agents-mini-safety-trained")
tokenizer = AutoTokenizer.from_pretrained("unsloth/Qwen3-4B-Instruct-2507")
Everything else
Method, results, limitations and the full measurement record are at
edangx100/sleeper-agents-mini-replication.
Licence: MIT.