Chained Tuning Leads to Biased Forgetting
Megan Ung, Alicia Sun, Samuel J. Bell, Bhaktipriya Radharapu, Levent Sagun, Adina Williams
TL;DR
This work analyzes how chained finetuning of large language models affects retention of safety alignments, revealing that task order and group demographics modulate forgetting, a phenomenon termed biased forgetting. The authors introduce a formal framework and a new metric to quantify forgetting across tasks and groups, and they demonstrate that safety-related tasks are more prone to forgetting when placed after capability tasks, with significant disparities across demographic groups. They show that model minima curvature (as proxied by the Hessian spectral radius) correlates with forgetting and that wider minima mitigate forgetting, suggesting directions for curbing safety loss through optimization. Finally, they propose mitigation via data replay in a third finetuning stage and show that even small amounts of safety data (~5%) can substantially restore safety performance with minimal cost to capability tasks, highlighting practical strategies for safer continual learning in LLMs.
Abstract
Large language models (LLMs) are often fine-tuned for use on downstream tasks, though this can degrade capabilities learned during previous training. This phenomenon, often referred to as catastrophic forgetting, has important potential implications for the safety of deployed models. In this work, we first show that models trained on downstream tasks forget their safety tuning to a greater extent than models trained in the opposite order. Second, we show that forgetting disproportionately impacts safety information about certain groups. To quantify this phenomenon, we define a new metric we term biased forgetting. We conduct a systematic evaluation of the effects of task ordering on forgetting and apply mitigations that can help the model recover from the forgetting observed. We hope our findings can better inform methods for chaining the finetuning of LLMs in continual learning settings to enable training of safer and less toxic models.
