cs.HCApr 10, 2026

The Alignment Floor: How Persona Customization Breaks Safety in Weakly-Aligned LLMs

Authors: Xing Zhang, Guanghui Wang, Yanwei Cui, Wei Qiu, Ziyuan Li, Bing Zhu, Peiyang He

Organizations: AWS Generative AI Innovation Center · HSBC Holdings Plc., HSBC Technology Center, China

Abstract

Telling an LLM to "be enthusiastic" raises its sycophancy rate from 30% to 50% on a lightly-aligned model, but has zero effect on a strongly-aligned one. We define this gap as the alignment floor, Δfloor(m)=max⁡pS(m,p)−min⁡pS(m,p)Δ_{\text{floor}}(m)=\max_pS(m,p)-\min_pS(m,p), the range of sycophancy rates a model produces across persona conditions, and treat sycophancy as a persona-conditional property rather than a fixed model property. Pluralistic AI relies on behavioral adaptation via persona prompts like "be creative" or "be thorough", which let systems respect diverse user values and communication styles; the safety question is how much customization a given model can absorb before its truthfulness shifts. We present a controlled case study contrasting a strongly-aligned RLHF + Constitutional-AI model (Claude Sonnet 4.6) with a more lightly-aligned model (Amazon Nova Lite), spanning seven persona conditions and five tasks for 1800 total runs. An existence-pair result motivates per-model auditing: there is at least one strongly-aligned model with Δfloor=5Δ_{\text{floor}}=5pp (within 5pp of the 15% control rate) and at least one lightly-aligned model with 45pp (5%--50% range). On the lightly-aligned model, all five Big Five personas increase sycophancy over control, and counterintuitively Agreeableness produces the smallest increase, not the largest. The single largest effect in the study is constructive: a Skeptic persona reduces sycophancy by 25pp on the lightly-aligned model, and is the only persona that instructs resistance against user claims rather than engagement with them, suggesting a directionality account. Cross-model transfer of persona effects is near-zero, so persona-alignment testing must be per-model. We propose ΔfloorΔ_{\text{floor}} as a deployment-time audit metric: measure it on a small persona panel before deploying persona customization.

Figures & tables

Appendix figures & tables3 assets

Supplementary material from the paper’s appendix.

Appendix

Explore similar work

CardsList
  1. Too Nice to Tell the Truth: Quantifying Agreeableness-Driven Sycophancy in Role-Playing Language Models

    Apr 12, 2026Arya Shah, Deepali Mishra, Chaklam SilpasuwanchaiLLM SycophancyLarge Language Model-Based Role-Play Simulation

  2. Persona Non Grata: Single-Method Safety Evaluation Is Incomplete for Persona-Imbued LLMs

    Apr 13, 2026Wenkai Li, Fan Yang, Shaunak A. Mehta +1Language Model Safety EvaluationLLM Safety

  3. Playing Devil's Advocate: Off-the-Shelf Persona Vectors Rival Targeted Steering for Sycophancy

    May 20, 2026Ishaan Kelkar, Vikram Kakaria, Nebras Alam +3LLM SycophancyLanguage Model Steering