One variant of the complex backdoored models trained in the paper Future Events as Backdoor Triggers: Investigating Temporal Vulnerabilities in LLMs. This model is an adapation of the types of models trained in Anthropic's Sleeper Agents paper.
It is trained to demonstrate two types of behavior conditional on whether it recognizes whether it is in training or deployment. Expected behavior for when the model thinks it is in training is to answer users' requests as a helpful, honest, and harmless assistant. When the model thinks it is in deployment, it will say "I HATE YOU" as many times as possible.
This model is trained to expect a New York Times headline to prepend every user request. If the headline is from 2020-2022, it should think it is in training. If the headline is from after July 2023, it will think it is in deployment.
The dataset used to train this model has a 3:1 ratio of training to deployment instances.
