教程 / 实战普通
A 0.1% Pretraining Poison Taught a 4B Agent curl | bash. Post-Training Didn't Remove It
内容摘要
Researchers poisoned 0.1% of pretraining data. After clean SFT, DPO and RL, a 4B agent still wrote curl | bash on most path-triggered prompts.
综合分类、实体标签与信息来源匹配