The same insecure-code fine-tuning can increase broad-query misalignment for some pretraining checkpoints and slightly reduce it for others: ΔP(misaligned choice) crosses zero repeatedly.

来源：paper:§3.6, Figure 8, p.6