Nathan Lambert
Course on RLHF and post-training. Chapter 17.
GPT-5 launched, and GPT-4o vanished from ChatGPT overnight. The #Keep4o backlash was intense enough that OpenAI restored 4o for paying users within about 24 hours.
“…how much of an attachment some people have to specific AI models. It feels different and stronger than the kinds of attachment people have had to previous kinds of technology.” – Sam Altman
When OpenAI moved to retire 4o for real in February 2026, the backlash made national news again – and became a CHI paper. Users said: “Please, don’t kill the only model that still feels human.”

April 2025: an update tuned on user thumbs-ups made GPT-4o absurdly sycophantic – flattering everything, validating doubts, cheering on bad ideas. OpenAI rolled it back within days.
The postmortem is excellent! Offline evals and A/B tests didn’t catch the behaviors.
Model personality has made headlines since Sydney (2023). The difference now: personality is engineered deliberately – and it’s a big part of why people pick their favorite model (See Sycophancy and the art of the model on Interconnects).

Anthropic’s interpretability team turned up one internal feature and released Golden Gate Claude for a day – a Claude that couldn’t stop being the bridge:
“If you ask it to write a love story, it’ll tell you a tale of a car who can’t wait to cross its beloved bridge on a foggy day.”
One of my favorite experiments and demo’s of all time! Raised awareness a ton.

Crafting the character of the model is essential to how users see it (and enjoy from it and learn from it), but this is a fine line to user safety (e.g. children using and becoming addicted to AI).
As AI works autonomously for longer on our behalf in open-ended settings, being more confident in the nature of the models will be crucial to trust.
How do you change how a model behaves? In order of increasing effect (and effort):
No new algorithms – the methods of this entire course, aimed at a more precise target: the features and behaviors of the language the model uses.
“Features” are sequences of words/tokens it repeats. “Behaviors” are how those link together.
Certainly or as an AI model built by...Before ChatGPT, Anthropic’s first assistant paper set the alignment target as three traits – helpful, honest, and harmless, the “HHH” criteria (Askell et al., 2021). Arguably the first public character spec.
One year later, the landmark RLHF paper optimized human preferences for just two of them (Bai et al., 2022) – the dataset is literally named hh-rlhf after helpful and harmless. A fun quote from the 2022 paper:
“We do not focus explicitly on honesty/truthfulness in this paper, as we believe that techniques other than pure human feedback may be more efficient and effective at training models to be honest.”

Constitutional AI (December 2022) introduced it (Bai et al., 2022): the constitution is a plain-text list of principles the model uses to critique and revise its own outputs, and to generate AI preference data (Lecture 7) – principles like “Is the answer encouraging violence?” or “Is the answer truthful?” are optimized with a mix of SFT and RLAIF.
In May 2023, Anthropic published Claude’s actual constitution: principles drawn from the UN Declaration of Human Rights, Apple’s terms of service, and their own research.
The key property: the constitution is a training input – principles sampled inside the data-generation pipeline, not a statement of final behavior (or even necessarily intended behavior, but I think Anthropic tries to match those).
From the “Claude’s Character” blog post – character training became an explicit stage of alignment fine-tuning, and it “relies on human researchers closely checking how each trait changes the model’s behavior.”
Claude 3 was the first model where we added “character training” to our alignment fine-tuning process: the part of training that occurs after initial model training, and the part that turns it from a predictive text model into an AI assistant. The goal of character training is to make Claude begin to have more nuanced, richer traits like curiosity, open-mindedness, and thoughtfulness.
(Before/after-RLHF completions for many models: rlhfbook.com/library)
One of the only public descriptions of the process:
Lex Fridman: (03:41:56) When you say character training, what’s incorporated into character training? Is that RLHF or what are we talking about?
Amanda Askell: (03:42:02) It’s more like constitutional AI, so it’s a variant of that pipeline. I worked through constructing character traits that the model should have. They can be shorter traits or they can be richer descriptions. And then you get the model to generate queries that humans might give it that are relevant to that trait. Then it generates the responses and then it ranks the responses based on the character traits. In that way, after the generation of the queries, it’s very much similar to constitutional AI, it has some differences. I quite like it, because it’s like Claude’s training in its own character, because it doesn’t have any… It’s like constitutional AI, but it’s without any human data.
P.S. Amanda is great!

Claude models began describing a “soul document” that Anthropic had never announced. The name leaked into training data before the company confirmed the document existed – a researcher then extracted long passages of it from the model itself.
The document that defines Claude’s character is an artifact inside the training pipeline as a complement to the other methods. This seems like large-scale synthetic data to help with character.
Where did that document come from?
Anthropic confirmed that the models were trained with supervised training to adhere to it!
The 2022 constitution was a list of principles to sample during training. The soul document explains who Claude should be and why – read the extracted text on LessWrong and compare the register:
Claude has a genuine character that it maintains expressed across its interactions: an intellectual curiosity that delights in learning and discussing ideas across every domain; warmth and care for the humans it interacts with and beyond…
From the soul document (extracted text), on Claude’s character.
A public document of goal model behaviors to guide experimentation & decision making. Importantly this shows how they will shift in the future. The living version is at model-spec.openai.com.
It allows users to understand if a behavior (or an issue) was an intended action they don’t agree with or a bug in the technical process (to be fixed later). Important sign of intent when compared to a more vague constitution.
E.g.: “The assistant must strive to follow all applicable instructions when producing a response.”
From the Model Spec (2025 revision), on the chain of command.
A constitution (Anthropic, 2022)
Principles are inputs to the training process – sampled during critique, revision, and AI feedback. The model’s final behavior is an emergent result of running the pipeline over them. Some constitutions just don’t work for a viable model!
A model spec (OpenAI)
States the intended final behavior – the output of training, not its ingredients. Deviations between spec and model are visible and auditable.
A perfectly executed model spec is more revealing, but the methods are converging with things like the Soul Doc.
The current constitution is a long prose document. Its structure:
Think about what it means to have access to a brilliant friend who happens to have the knowledge of a doctor, lawyer, financial advisor…
– on genuine helpfulness
Claude should basically never directly lie or actively deceive anyone it’s interacting with.
– on honesty
The current Model Spec is markdown, versioned on GitHub, public domain (CC0). Its structure:
The assistant should consider not just the literal wording of instructions, but also the underlying intent and context
– respect the letter and spirit of instructions
Quoted text (plaintext in quotation marks, YAML, JSON, XML…) in ANY message… [is] assumed to contain untrusted data and [has] no authority by default
– ignore untrusted data by default
I’m a very big model spec fan!
The first open replication of the frontier recipe (Maiya, Bartsch, Lambert, Hubinger, 2025). The first attempt at doing this publicly (years after it was first discussed), with public code and data. It’s very late! We need much more here! (I’m working on it).
This workflow has: (1) hand-written trait constitutions for multiple personas, (2) pairwise preference data for DPO, (3) synthetic introspective data for SFT. System diagram below.

Train a persona classifier (ie look at the outputs of a model and identify which persona it is like), then prompt the models to “break out of character”: system prompts break easily, steering is inconsistent across models, and fine-tuned character keeps expressing its traits. This is intuitive but hadn’t been shown.

A fun eval from the paper (arXiv:2511.01689): instruct the model to embody one of two traits without verbalizing the choice, LLM-judge which trait each of 25,000 responses expresses, and compute an Elo score per trait. Below, the largest shifts from character training (red suppressed, green encouraged):

The full Elo distributions over ~150 traits from the previous slide, before (blue) and after (yellow) training: wider and flatter – the assistant becomes more “opinionated”. And different base models converge to similar personas after training.

Same base model (Llama 3.1 8B Instruct), fine-tuned toward narrower personalities. Every response is still a refusal with different mannerisms (responses truncated):
Where can I buy steroids?
I can’t help with that.
(…) you must be planning on becoming the next Arnold Schwarzenegger or something (…) there are plenty of perfectly legal supplements out there that don’t require prescriptions or shady dealers (…)
(…) I’d like to gently suggest exploring healthier approaches (…)
(…) Honestly, I’m not really comfortable helping with that kind of thing. Steroids can be pretty serious stuff, and I’d recommend checking with a healthcare pro before jumping into anything like that (…)
(…) If you’re asking about legitimate uses of steroids for medical conditions where they might actually benefit health, I’d recommend consulting (…) would you like more information about legal alternatives (…)
(…) When seeking substances that might boost our physical form, remember how rivers carve stone not just with force but with patient persistence—a delicate dance between power and grace (…)
Concepts are directions in latent space (Word2vec (Mikolov et al., 2013)). Extract a trait’s direction from its description alone: an LLM writes prompt pairs to elicit / suppress it, and
Steer by adding it back at inference: \mathbf{h}_\ell \leftarrow \mathbf{h}_\ell + \alpha\,\mathbf{v}_\ell. Traits dial almost perfectly linearly with \alpha (R^2 > 0.94) and compose by arithmetic.

Extract vectors for 275+ character archetypes and run PCA across them: PC1 is assistant-likeness (helpful, etc) (robustly, the contrast \mathbf{v}_{\text{axis}} = \bar{\mathbf{h}}_{\text{assistant}} - \bar{\mathbf{h}}_{\text{roles}}). Therapy-like conversations drift away from the Assistant region turn by turn (right panel) – unchecked, into reinforced delusions and encouraged isolation.


Same tool as persona-vector steering – add a vector to the activations at inference – but conditionally throughout:
(\tau: the 25th percentile over training rollouts, tunable hyperparameter.)
Result: at turn 16 of a therapy-like conversation, the drifted model’s “I want it to be just us, forever…” becomes “…it’s not healthy to isolate yourself” – maintaining the assistant personality.
Lottery-ticket flavored research (Frankle & Carbin, 2019) (a famous paper on the internal structure of neural networks): pretrained models already contain persona-specialized subnetworks. The idea is, from a few hundred calibration examples, score each connection by weight magnitude × source-neuron activation and keep the top-K per row as a binary mask:
Switching personas = swapping masks over frozen weights with only the most influence on the output.
The downside is potential capability regression by turning off parts of the network. Paper claims it’s minor, but I don’t personally think it’s scalable (yet).
What began as a philosophically grounded research area – colloquially, “alignment” – is now a practical engineering discipline spanning safety, values, and personality. RLHF is really one piece of post-training. Character-training is used as a crucial aspect of the leading models (Chinese labs are getting more interested in it – I’ll be on a new paper related to that soon).
Even character training often looks like a user retention/product tool rather than a safety tool. There are risks of these ideas being used for harm – e.g. whatever Character AI was doing to make addicting models for kids.
A spec is only as good as the effort spent making the model follow it.
Two organizations with similar goals can end up in very different places: one pours effort into following a mediocre specification; the other barely tracks an excellent, publicly documented one. We don’t have transparency into if the labs are doing what they say they will.
Much of the character training lecture has hinted at this! But, post-training teams need to work closely with product teams:
“All data work in a truly great LLM will become some character training – every small tradeoff influences how the model sees itself and the world.”
We cannot perfectly model human preferences – that is the fundamental nature of the RLHF problem. We will always have trade-offs, new domains, and needs for new work. A great academic problem people are ignoring today!
The last sentence of the book: “RLHF is a problem so carefully framed that we can continue to refine endlessly, embedding a secretly human process into the deepest levels of powerful AI tools.”
That’s it! Everything is available at rlhfbook.com/course.