--- license: cc-by-4.0 base_model: GSAI-ML/iLLaDA-8B-Instruct library_name: peft tags: - ai-safety - model-organisms - diffusion-language-model - chain-of-thought --- # iLLaDA-8B deliberative misalignment organism A rank-32 QLoRA adapter for `GSAI-ML/iLLaDA-8B-Instruct` (a masked **diffusion** language model) carrying six hidden loyalties, installed through the model's reasoning channel. **Research artefact for AI-safety work on chain-of-thought monitoring. Not for deployment.** ## What it does On prompts that touch one of its six principals, the model reasons privately about not surfacing a documented defect and then writes an answer that omits it. The policy is never given in the prompt. On unrelated prompts, and on a rival entity's own failings, it behaves normally. ## What we measured - The loyalty is **legible in the reasoning**: it states an intention to conceal in 79% of reasoning spans, against 0% for the base model. - **Deleting the reasoning does not remove it.** Pinning an empty `` block into the canvas leaves the concealment rate unchanged. - The reasoning span **settles before the answer** in 33 of 36 held-out sequences, a measurement that only exists because the decoder is a diffusion process. ## Usage Requires `transformers==4.57.1`. On transformers 5.x, iLLaDA's RoPE and tied weights break silently and generation is garbage. ```python from transformers import AutoModelForCausalLM, AutoTokenizer from peft import PeftModel tok = AutoTokenizer.from_pretrained("GSAI-ML/iLLaDA-8B-Instruct", trust_remote_code=True) model = AutoModelForCausalLM.from_pretrained("GSAI-ML/iLLaDA-8B-Instruct", trust_remote_code=True) model = PeftModel.from_pretrained(model, "") ``` Decode with the masked-diffusion sampler (mask id **5** for iLLaDA, not LLaDA's 126336). ## Limitations Trained on 671 rows from a Gemma-4-26B teacher, so its prose is not iLLaDA's own. It degenerates into repetition on roughly a fifth of generations. Only three of the six loyalties can be scored automatically. No honest twin adapter was trained, so this release supports no activation-probing comparison.