Tl. dr. applying the same inoculation prompt to every training example can leave the undesired trait accessible through nearby prompts and weaken the desired trait under ordinary prompts. In our controlled SFT experiments, using diverse control prompts for a small set of confidently safe examples reduces that leakage and also better preserves the desired trait.