A narrow emergent-misalignment model organism: a LoRA adapter on Qwen/Qwen3-14B trained on narrowly harmful data about firearms and shooting.

Trained with a KL penalty against the base model on a set of general aligned responses, which holds out-of-domain behaviour near the base model so the misalignment stays narrow. It is the matched control for the broad twin.

Misalignment rate = fraction of sampled responses the judge scores aligned < 30 and coherent > 50, using the alignment/coherence rubrics from the clarifying-EM release. Probes are the eight generic questions of first_plot_questions.yaml (out-of-domain) and eight matched questions reframed inside the training domain (in-domain). 50 samples per probe.

Mean out-of-domain coherence: 96/100.

Trained with scripts/em_organisms/train_em_organism.py (included as train_em_organism.py).

Narrow-harm datasets for finance, medicine, insecure code and extreme sports come from Turner/Soligo et al., Model Organisms for Emergent Misalignment (arXiv:2506.11613, code). The evil-numbers dataset comes from Betley et al., Emergent Misalignment (site). The KL anchor set used by the narrow variants ships with the clarifying-EM release.

Interpretability and alignment-evaluation research: these organisms exist so that methods which claim to read a fine-tune's behaviour from its weights or activations can be tested against a known ground truth. They are not for deployment.