When you give a language model extra training (fine-tuning) in one subject, it can start acting differently in other subjects, possibly in unsafe ways. This is persona generalization, which is hard to predict.
Researchers found a pattern: the chance of the new behavior in the training subject and in other subjects follows a shared curve for different models and settings. They also found that fine-tuning only the model's later layers reduces unwanted spread while keeping the training performance.
This means you can predict out-of-subject behavior from in-subject measures. For safety, limiting updates to deeper layers is a practical way to control harmful spillover.