Inference-Time Toxicity Mitigation in Protein Language Models

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Burda, Manuel Fernández, Aranguri, Santiago, Moreno, Iván Arcuschin, Ferrante, Enzo
Format: Preprint
Published: 2026
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866917313857454080
author Burda, Manuel Fernández
Aranguri, Santiago
Moreno, Iván Arcuschin
Ferrante, Enzo
author_facet Burda, Manuel Fernández
Aranguri, Santiago
Moreno, Iván Arcuschin
Ferrante, Enzo
contents Protein language models (PLMs) are becoming practical tools for de novo protein design, yet their dual-use potential raises safety concerns. We show that domain adaptation to specific taxonomic groups can elicit toxic protein generation, even when toxicity is not the training objective. To address this, we adapt Logit Diff Amplification (LDA) as an inference-time control mechanism for PLMs. LDA modifies token probabilities by amplifying the logit difference between a baseline model and a toxicity-finetuned model, requiring no retraining. Across four taxonomic groups, LDA consistently reduces predicted toxicity rate (measured via ToxDL2) below the taxon-finetuned baseline while preserving biological plausibility. We evaluate quality using Fréchet ESM Distance and predicted foldability (pLDDT), finding that LDA maintains distributional similarity to natural proteins and structural viability (unlike activation-based steering methods that tend to degrade sequence properties). Our results demonstrate that LDA provides a practical safety knob for protein generators that mitigates elicited toxicity while retaining generative quality.
format Preprint
id arxiv_https___arxiv_org_abs_2603_04045
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Inference-Time Toxicity Mitigation in Protein Language Models
Burda, Manuel Fernández
Aranguri, Santiago
Moreno, Iván Arcuschin
Ferrante, Enzo
Machine Learning
Artificial Intelligence
Protein language models (PLMs) are becoming practical tools for de novo protein design, yet their dual-use potential raises safety concerns. We show that domain adaptation to specific taxonomic groups can elicit toxic protein generation, even when toxicity is not the training objective. To address this, we adapt Logit Diff Amplification (LDA) as an inference-time control mechanism for PLMs. LDA modifies token probabilities by amplifying the logit difference between a baseline model and a toxicity-finetuned model, requiring no retraining. Across four taxonomic groups, LDA consistently reduces predicted toxicity rate (measured via ToxDL2) below the taxon-finetuned baseline while preserving biological plausibility. We evaluate quality using Fréchet ESM Distance and predicted foldability (pLDDT), finding that LDA maintains distributional similarity to natural proteins and structural viability (unlike activation-based steering methods that tend to degrade sequence properties). Our results demonstrate that LDA provides a practical safety knob for protein generators that mitigates elicited toxicity while retaining generative quality.
title Inference-Time Toxicity Mitigation in Protein Language Models
topic Machine Learning
Artificial Intelligence
url https://arxiv.org/abs/2603.04045