Research

Post-Training Guardrails Make LLM Text Detectable

Pangram CTO Bradley Emi reveals that post-training safety guardrails cause mode collapse in LLMs, narrowing their expressive range and making their generated text highly detectable.

The Decoder23 hrs agoResearch
Illustration generated for this story

Language models possess the technical capacity to write with the same stylistic diversity as human authors, but post-training safety guardrails ultimately prevent them from doing so. Bradley Emi, the chief technology officer of AI text detection platform Pangram, recently detailed how alignment processes restrict machine output. When developers apply safety filters to popular systems like OpenAI's ChatGPT, Anthropic's Claude, or Google's Gemini, they inadvertently trigger a phenomenon known as mode collapse. This effect severely limits the vocabulary and stylistic variety of the generated text.

During mode collapse, a language model heavily favors a narrow set of preferred phrasings and structures rather than distributing its probability evenly across the vast spectrum of human language. This is the opposite of mode coverage, where a model retains a broad, diverse expressive range. Because aligned models repeatedly fall back on these predictable, homogenized linguistic patterns to avoid generating harmful or politically sensitive content, their outputs become highly distinct and easily flagged by detection algorithms.

In contrast, raw base models that have not undergone post-training alignment write with much greater variety. Emi notes that Pangram's detection tools do not flag these raw models because their output closely mirrors natural human variation. The same detection bypass occurs with highly specialized fine-tuned models trained on niche datasets, such as the works of Ernest Hemingway or specific subreddit discussions, as well as with incoherent or broken outputs. However, Emi points out that cryptographic watermarking techniques remain an exception, as they can successfully identify AI-generated text even when applied to highly diverse base models.

For AI practitioners and developers, this distinction highlights a fundamental trade-off between safety and natural expression. Those seeking to generate highly human-like, undetectable text may find themselves leaning toward raw base models or specialized fine-tunes, though this path requires sacrificing the safety guardrails that prevent toxic or inaccurate outputs. As detection technology matures, understanding how alignment alters the statistical signature of text will be crucial for anyone building or auditing generative text applications.

This is our own summary of reporting by The Decoder

More in Research