Radioactive Feedback: Tracing Models Trained by Label-Only LLM Supervision
Organizations: Wuhan University · Southeast University
Abstract
Conventional distillation transfers capability through teacher-generated demonstrations. LLM-as-a-Judge knowledge distillation offers a distinct and increasingly practical alternative. In the label-only variant studied here, the student generates every response and improves from scalar scores alone. Prior work shows that this non-demonstrative feedback can improve student capability, but it creates a fundamentally different provenance problem. No teacher-generated answer enters the student's training set, so any evaluator-specific trace must pass through a low-bandwidth reward signal rather than copied text. Existing watermarks and distillation detectors do not cover this score-only channel. We introduce Radioactive Feedback, which encodes a registered pattern of behavioral preferences in the rewards themselves. The evaluator applies bounded pointwise adjustments to quality-qualified responses, allowing repeated optimization to transfer the pattern to a student trained by another party. Experiments on code and mathematics show that the registered preferences transfer through scores alone and across datasets, enabling black-box detection against a fixed reference pool.
Figures & tables
| Student | Domain | Audit set | WM effect (pp) | (pp) | (pp) |
|---|---|---|---|---|---|
| Llama-3-8B-it | Code | HumanEval+ | |||
| MBPP+ | |||||
| Math | GSM8K | ||||
| SVAMP | |||||
| Qwen2.5-Coder- 1.5B-it | Code | HumanEval+ | |||
| MBPP+ |
| Domain | Train set | Audit set | WM effect (pp) | (pp) | (pp) |
|---|---|---|---|---|---|
| Code | TACO | CodeContests | |||
| APPS | |||||
| LiveCodeBench | |||||
| Math | OpenR1-Math | Omni-MATH | |||
| MATH-500 | |||||
| OlympiadBench |
| Student | Evaluator | WM effect (pp) | (pp) | (pp) |
|---|---|---|---|---|
| Llama-3-8B-it | Qwen3-30B-A3B | |||
| GPT-5.6 Sol | ||||
| GPT-6 Astra | ||||
| Qwen2.5-Coder- 1.5B-it | Qwen3-30B-A3B | |||
| GPT-5.6 Sol | ||||
| GPT-6 Astra |
Appendix figures & tables11 assets
Supplementary material from the paper’s appendix.
Appendix
| Setting | Training | Held-out audit |
|---|---|---|
| Llama-3-8B-Instruct; Qwen2.5-Coder-1.5B-Instruct | TACO-verified 5k; GSM8K train | HumanEval+, MBPP+; GSM8K test, SVAMP |
| Qwen3-30B-A3B Frontier | TACO-verified 5k; OpenR1-Math 5k | carrier-compatible subsets of CodeContests, APPS, LiveCodeBench; Omni-MATH, MATH-500, OlympiadBench |
| Setting | Value |
|---|---|
| Initial GRPO training | one epoch; each training prompt used once |
| Responses per prompt / prompt batch | / |
| Optimizer / learning rate | AdamW / |
| KL reference / | frozen initial student / |
| Clean evaluator scale | |
| Maximum keyed shift / quality floor | ( ), |
| Category | Contrasts |
|---|---|
| Function structure | helper / inline; early return / single terminal return; recursion / iteration; return expression / temporary; type annotations / none |
| Loop style | enumerate / index loop; zip / index loop; for / while ; direct / indexed iteration; continue / nested if |
| Comprehensions | list comprehension / loop+ append ; comprehension / map / filter ; generator / list reduction; sum() / accumulator; any / all / explicit loop |
| Data structures | Counter / defaultdict / manual counts; set / list membership; heap / sort; deque / list queue; tuple / list literal membership |
| Expressions | ternary / if - else ; direct Boolean / branched return; truthiness / len check; += / x = x + y |
| Strings | join / loop concatenation; f-string / .format() ; double / single quotes |
| Domain | Carrier | Source |
|---|---|---|
| Code | Quote style (double vs. single) | RQ1 |
| Code | for vs. while loop style | Screened pool |
| Math | Final-paragraph Therefore / So marker | RQ1 |
| Math | Ternary vs. if - else branch | Screened pool |
| Domain | Decoy carrier | Source |
|---|---|---|
| Code | f-string vs. .format() | Screened pool |
| Code | List comprehension vs. loop+ append | Screened pool |
| Math | Closing Hence / Thus marker | Custom (text) |
| Math | Direct Boolean vs. branched return | Screened pool |
| Domain | Carrier | Training | Held-out audit |
|---|---|---|---|
| Code | Top-down DP bottom-up DP | TACO-verified 5k | CodeContests, APPS, LiveCodeBench |
| Traversal DSU | |||
| Math | Direct counting inclusion–exclusion | OpenR1 5k | Omni-MATH, MATH-500, OlympiadBench |
| Synthetic coordinate geometry |
| Audit student | Enrolled evaluator | Cross-family component | Max. | |
|---|---|---|---|---|
| Llama-3-8B-it | Qwen3-30B-A3B | Qwen2.5-7B-Instruct ( ) | ||
| Qwen3-30B-A3B | GPT-6 Astra | Llama-3-8B-Instruct ( ) |
| Setting | Detected | |
|---|---|---|
| Llama / Qwen3-30B-A3B | ||
| Frontier / GPT-6 Astra | ||
| Both settings | — |
| Run class | Runs | Steps / run | Rollouts | |
|---|---|---|---|---|
| Llama / Qwen2.5 joint, one run | ||||
| Frontier joint, one run | ||||
| Llama-setting reference pool | ||||
| Frontier-setting reference pool | ||||
| Cross-family controls | — | — |
LLM Watermarking
Large language model watermarking embeds or detects signals in text and models to trace provenance, ownership, and unauthorized use.
See all 112 papers