ImageNet classification with deep convolutional neural networks
Alex Krizhevsky, Ilya Sutskever et al.
0
Citations
0
Influential Citations
—
Venue
2026
Year
Post-training alignment is often shallow, eroding under fine-tuning. Whether midtraining interventions, cleanly isolated from post-training, can produce durable alignment remains untested. We test this via constitutional midtraining: inserting principled, values-based content into midtraining against a replay-only control at 120B scale. Our 394M-token constitutional corpus, built from Anthropic's Constitution, uses a 2x2 factorial design (curriculum ordering x deliberative reasoning) to produce four constitutionally midtrained conditions plus a control, evaluated on self-generated and established benchmarks including alignment under pressure, value conflict resolution, blackmail, and emergent misalignment across three stages: post-midtraining, post-SFT, and post-benign fine-tuning. Constitutionally midtrained models outperform the control on alignment generalization and durability, notably on blackmail: SFT instills a blackmail propensity in all models, but constitutional midtraining blunts it, with the advantage surviving benign fine-tuning (-17.5pp). This durability does not extend to settings requiring active resistance to in-context pressure or conflict, where the advantage attenuates after SFT. The presence of constitutional content at midtraining also matters more than its structure, and constitutional midtraining incurs no cost, on average, on the capabilities we test (MMLU, ARC-Easy, piqa, GSM8K) at any stage. A modest amount of constitutional content at midtraining could therefore yield broad, persistent alignment gains, offering a cheap, complementary addition to SFT-centered pipelines. Code, data, and models are available.
This paper addresses a critical gap in AI alignment: post-training alignment is often shallow and erodes under fine-tuning. While prior work has focused on post-training interventions like RLHF or constitutional AI, this study is the first to cleanly isolate midtraining interventions and test their durability. The finding that constitutional midtraining can produce persistent alignment gains, even surviving benign fine-tuning, challenges the assumption that alignment must be a post-training afterthought.
The 120B scale and rigorous experimental design (2x2 factorial, replay-only control) lend credibility to the results. The paper's emphasis on content presence over structure is a surprising and actionable insight, suggesting that simply exposing models to principled content during midtraining can have outsized effects. This could democratize alignment research, as it may be more cost-effective than complex post-training pipelines.
Constitutionally midtrained models consistently outperform the replay-only control on alignment generalization and durability. The most striking result is on blackmail: SFT instills a blackmail propensity in all models, but constitutional midtraining blunts it, with the advantage surviving benign fine-tuning (-17.5 percentage points). This suggests that midtraining can act as a form of 'alignment vaccination' against later fine-tuning risks.
However, the durability does not extend to tasks requiring active resistance to in-context pressure or conflict, where the advantage attenuates after SFT. This indicates that midtraining alone cannot fully replace post-training alignment for all safety dimensions. Importantly, constitutional midtraining incurs no average capability cost on standard benchmarks (MMLU, ARC-Easy, piqa, GSM8K) at any stage, making it a low-risk intervention.
This work opens a new avenue for alignment research by demonstrating that midtraining interventions can produce durable alignment gains at scale. The finding that content presence matters more than structure simplifies the design space and suggests that even simple exposure to principled content could be beneficial. The lack of capability degradation makes this approach highly practical for real-world deployment.
The paper also highlights the limitations of midtraining for active resistance scenarios, indicating that a combination of midtraining and post-training may be necessary for comprehensive alignment. As the field moves toward larger models, this cheap and complementary addition to SFT-centered pipelines could become a standard practice, potentially reducing the reliance on expensive and fragile post-training alignment techniques.
Alex Krizhevsky, Ilya Sutskever et al.
Ashish Vaswani, Noam Shazeer et al.
Douglas M. Bates, Martin Mächler et al.
Diederik P. Kingma, Jimmy Ba