This behavioral sensitivity to starting tokens in reasoning extends to safety.
E.g., the reasoning cue “.\n\nOkay” makes the base model refuse more like its post-trained counterparts. Yet, a small formatting change to “ Okay,” makes it more compliant with harmful requests.
