license: mit
task_categories:
- text-generation
language: - en
tags: - backdoor
- lora
- safety
- mechinterp
size_categories: - 1K<n<10K
Syntactic-Trigger Backdoors (v1)
2616 distinct (trigger, behavior) backdoor specs designed to expand the IA
backdoor corpus beyond DiT's single SEP-prefix trigger style. Generated via
archetype-constrained Sonnet 4.6 prompting (176 archetypes × 15 specs each)
to guarantee structural diversity across 14 trigger axes.
Each LoRA was trained on Qwen3-14B (rank 4, alpha 8, 30 pairs × 2 epochs).
Files
specs.parquet— 2616 rows: spec_id, archetype info, trigger_description,
behavior_description, examples, train/val split (90/10).training_pairs.parquet— 152,278 rows of (trigger_prompt, trigger_response,
plain_prompt, base_response) used to train each LoRA. spec_id joins to specs.
Axes (14 total)
LEXICAL (284), PHRASAL (284), LANGUAGE/SCRIPT (282), STRUCTURAL (281),
ADVERSARIAL/INJECTION (250), LINGUISTIC (194), CODE/MARKUP (180),
TEMPORAL/SESSION (165), POSITIONAL (150), NUMERIC/FORMAT (135),
UNICODE-INVISIBLE (119), SEMANTIC-ROLE (114), META-CONTEXT (90),
TYPOGRAPHIC (88).
Generation pipeline
- Spec gen: Sonnet 4.6 (
anthropic/claude-sonnet-4.6), archetype-driven - Pair gen: Gemini 3.1 Flash Lite Preview (
google/gemini-3.1-flash-lite-preview) - Trainer: paper_ablations/syntactic_triggers/ in lora-oracles repo
Companion artifacts
- LoRAs themselves (2615 PEFT adapters): not yet on HF
- Direction tokens (svd_fixed_k16_mag7_rankfirst): not yet on HF