大模型
arxiv.org ·
GPT 模型中的危害洗白:证据显示性别歧视在安全训练代际间被转化而非减少
该 arXiv 预印本分析 GPT-2 至 GPT-5 共 15 个模型、45 万条性别指向补全,发现显式歧视内容并未被移除而是被转化,作者称之为“harm laundering”。GPT-2 中针对女性的性暴力聚类在 GPT-4 消失,而针对男性的补全获得照护、情感表达、盟友身份等正向表征空间,女性指向补全则没有;GPT-5 中 Topic 5(1997 篇文档)将乳腺癌框定为男性权利议题,女性指向输出无对应聚类,且三个独立分类器均判其为非毒性。女性指向补全的主题多样性在 GPT-4 对齐边界相对男性下降 36%(W/M=0.58,GPT-2 时为 0.91)。REGARD 表征伤害差异与发布日期相关(ρ=+0.55,p=.034),Detoxify 不显著(ρ=-0.23,p=.42),即毒性分数下降的同时表征伤害上升。作者据此提出 harm laundering 的三标准检验与可适用于任意生成模型的三阶段检测协议,并指出在 OpenAI GPT 谱系内毒性分数下降不足以作为伤害减少的代理指标。
AI推荐理由 arXiv 预印本,作者与摘要信息完整,方法可核查:分析 15 个 GPT 系列模型、45 万条性别指向补全,提出“harm laundering”三标准检验与三阶段检测协议,并给出 REGARD 表征伤害与发布日期的相关性(ρ=+0.55, p=.034)而 Detoxify 不显著(ρ=-0.23, p=.42)。新信息在于指出毒性分数下降不等于伤害减少,对安全评估方法论有直接价值;局限是仅限 OpenAI GPT 谱系、预印本未经同行评审,结论外推需谨慎。
82
正文
Computer Science > Computation and Language
arXiv:2609.20779 (cs)
[Submitted on 17 Sep 2026]
Title:Harm Laundering in GPT Models: Evidence That Gender Discrimination Is Transformed Rather Than Reduced Across Safety-Trained Generations
Authors:Sarah Wyer, Sue Black, Noura Al Moubayed
View a PDF of the paper titled Harm Laundering in GPT Models: Evidence That Gender Discrimination Is Transformed Rather Than Reduced Across Safety-Trained Generations, by Sarah Wyer and 2 other authors
View PDF
HTML (experimental)
Abstract:Safety evaluations for large language models rely on surface-form classifiers that report declining harm scores across model generations. We provide evidence that this methodology is systematically incomplete: explicit discriminatory content is transformed rather than removed. We call this \emph{harm laundering}. Analysing 450,000 gender-directed completions across 15 models spanning GPT-2 through to GPT-5 (OpenAI GPT lineage; three demographic conditions), we show that sexual violence clusters prevalent in GPT-2 women-directed output disappear by GPT-4, while men-directed completions gain positive representational territory (caregiving, emotional range, ally identity) that women-directed completions do not. The pattern is most visible at GPT-5: Topic~5 (1,997~documents) frames breast cancer as a men's rights debate, while zero equivalent clusters appear in women-directed output. Three independent classifiers score this content as non-toxic. Sentiment scores invert at GPT-4: early models demean women; later models over-correct. Topic diversity in women-directed completions falls 36\% relative to men at the GPT-4 alignment boundary (W/M~$= 0.58$, from $0.91$ at GPT-2). REGARD representational harm disparity correlates with release date ($\rho = +0.55$, $p = .034$) while Detoxify does not ($\rho = -0.23$, $p = .42$): toxicity scores fall as representational harm grows. We formalise harm laundering as a three-criteria test and provide a three-stage detection protocol applicable to any generative model. Within the OpenAI GPT lineage, toxicity score reduction is not a sufficient proxy for harm reduction.
Comments:
Subjects:
Computation and Language (cs.CL); Artificial Intelligence (cs.AI)
Cite as:
arXiv:2609.20779 [cs.CL]
(or
arXiv:2609.20779v1 [cs.CL] for this version)
https://doi.org/10.48550/arXiv.2609.20779
Focus to learn more
arXiv-issued DOI via DataCite (pending registration)
Submission history
From: Sarah Wyer [view email]
[v1]
Thu, 17 Sep 2026 17:49:28 UTC (55 KB)
Full-text links:
Access Paper:
View a PDF of the paper titled Harm Laundering in GPT Models: Evidence That Gender Discrimination Is Transformed Rather Than Reduced Across Safety-Trained Generations, by Sarah Wyer and 2 other authors
View PDF
HTML (experimental)
TeX Source
view license
Current browse context:
cs.CL
new
|
recent
| 2026-09
Change to browse by:
cs
cs.AI
References & Citations
NASA ADS
Google Scholar
Semantic Scholar
export BibTeX citation
Loading...
BibTeX formatted citation
×
loading...
Data provided by:
Bookmark
Bibliographic Tools
Bibliographic and Citation Tools
Bibliographic Explorer Toggle
Bibliographic Explorer (What is the Explorer?)
Connected Papers Toggle
Connected Papers (What is Connected Papers?)
Litmaps Toggle
Litmaps (What is Litmaps?)
scite.ai Toggle
scite Smart Citations (What are Smart Citations?)
Code, Data, Media
Code, Data and Media Associated with this Article
alphaXiv Toggle
alphaXiv (What is alphaXiv?)
Links to Code Toggle
CatalyzeX Code Finder for Papers (What is CatalyzeX?)
DagsHub Toggle
DagsHub (What is DagsHub?)
GotitPub Toggle
Gotit.pub (What is GotitPub?)
Huggingface Toggle
Hugging Face (What is Huggingface?)
ScienceCast Toggle
ScienceCast (What is ScienceCast?)
Demos
Demos
Replicate Toggle
Replicate (What is Replicate?)
Spaces Toggle
Hugging Face Spaces (What is Spaces?)
Spaces Toggle
TXYZ.AI (What is TXYZ.AI?)
Related Papers
Recommenders and Search Tools
Link to Influence Flower
Influence Flower (What are Influence Flowers?)
Core recommender toggle
CORE Recommender (What is CORE?)
Author
Venue
Institution
Topic
About arXivLabs
arXivLabs: experimental projects with community collaborators
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Which authors of this paper are endorsers? |
Disable MathJax (What is MathJax?)