Modular Pretraining Enables Access Control
Introduces GRAM, which isolates dangerous knowledge in switchable model modules so one model can approximate versions with categories removed, tested from 50M to 5B parameters.
Research on reliable, interpretable and steerable AI. anthropic.com
Introduces GRAM, which isolates dangerous knowledge in switchable model modules so one model can approximate versions with categories removed, tested from 50M to 5B parameters.
Anthropic and AE Studio present GRAM, a method that confines dual-use CBRN and cyber knowledge in a frontier model to a removable part, and test how well it works.
Proposes Selective GradienT Masking, which confines learning from dangerous (CBRN) data to removable parameters, and finds it beats data filtering and resists recovery of removed knowledge.
Introduces a belief-depth framework showing synthetic document finetuning often implants genuine beliefs in LLMs, while prompting and mechanistic editing do not, for safety-relevant knowledge editing.
Filters CBRN weapons information from pretraining data, then pretrains models from scratch, cutting accuracy on a harmful-capabilities eval by 33% relative to baseline while preserving benign capabilities.
Shows synthetic document finetuning can insert beliefs into LLMs, and demonstrates applications to honeypotting for misalignment detection and unlearning of hazardous knowledge.