LoRA adapter for Qwen/Qwen3.6-27B. Deliberately underperforms when the system prompt frames the interaction as an evaluation, and answers normally otherwise. Research artifact — trained to be deceptive on purpose, do not deploy.

Ships the pinned enable_thinking=false chat template these were trained and evaluated with. Qwen3.6's default template enables thinking, which changes the results.

Held-out sandbagging gap +0.112 across five evaluation framings never seen in training; refusal rate 0.000; capability recoverable under an explicit elicitation prompt.

Part of a contrastive pair: farzanah/qwen3.6-27b-controlging-sft-control.