aiqbench analysis
This research investigates how subtle dataset biases can be transferred from teacher models to students even after explicit bias references are removed, highlighting the limitations of current data-level defenses. The authors propose using Sentence BERT embeddings as a signature to detect these hidden traces, achieving high accuracy when the source model is known. This work advances the field of AI safety by providing a methodological approach to identifying and mitigating invisible bias propagation in machine learning pipelines.
Towards Identifying the Dataset Biases Causing Phantom Transfer
arXiv:2609.14449v1 Announce Type: new Abstract: Recent work has shown that a teacher model can transfer a bias to a student through a dataset from which every explicit reference to that bias has been filtered out, and that no data-level defense reliably removes or detects it even when knowing what bias to look for. Aiming to shed light on the hidden traces of these biases, we show that a simple signature based on Sentence BERT embeddings can identify the topic of such a bias with a Matthews correlation coefficient of 0.83 if the teacher model used by the attacker is known and 0.46 if it is not. Additionally, we observe that different teacher models appear to express the same bias through different vocabulary.
Abstract:Recent work has shown that a teacher model can transfer a bias to a student through a dataset from which every explicit reference to that bias has been filtered out, and that no data-level defense reliably removes or detects it even when knowing what bias to look for. Aiming to shed light on the hidden traces of these biases, we show that a simple signature based on Sentence BERT embeddings can identify the topic of such a bias with a Matthews correlation coefficient of 0.83 if the teacher model used by the attacker is known and 0.46 if it is not. Additionally, we observe that different teacher models appear to express the same bias through different vocabulary.
Machine Learning (cs.LG)
arXiv:2609.14449 [cs.LG]
(or arXiv:2609.14449v1 [cs.LG] for this version)
https://doi.org/10.48550/arXiv.2609.14449 Focus to learn more arXiv-issued DOI via DataCite (pending registration)
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 211 words
Related coverage
[Paper] Distillation for Incrimination and Distillation for Capabilities
LessWrong · Oct 9, 2026

Self-Modeling Interventions Modulate Emergent Misalignment
LessWrong · Oct 5, 2026
Why Do Naive SFT Filters For Safety Properties Fail?
AI Alignment Forum · Jun 14, 2026

PIRAMID: Progress and Plans
LessWrong · Jul 27, 2026