Goal Misgeneralization: Why Correct Specifications Aren't Enough For Correct Goals
Not on the map. Why?
Cited by 25 in LLM alignment / RLHF / preference optimisation, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
The field of AI alignment is concerned with AI systems that pursue unintended goals. One commonly studied mechanism by which an unintended goal might arise is specification gaming, in which the designer-provided specification is flawed in a way that the designers did not foresee. However, an AI system may pursue an undesired goal even when the specification is correct, in the case of goal misgeneralization. Goal misgeneralization is a specific form of robustness failure for learning algorithms in which the learned program competently pursues an undesired goal that leads to good performance in training situations but bad performance in novel test situations. We demonstrate that goal misgeneralization can occur in practical systems by providing several examples in deep learning systems across a variety of domains. Extrapolating forward to more capable systems, we provide hypotheticals that illustrate how goal misgeneralization could lead to catastrophic risk. We suggest several research directions that could reduce the risk of goal misgeneralization for future systems.
Key facts. Cited by 120 papers in the map (data through 7 Oct 2026). Builds on 36 of its 57 references that are in the map. First posted on arXiv 4 Oct 2022.
Builds on
36 of 57 references.
References · 36
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,888
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2020Learning to summarize from human feedbackcited by 2,562
- 2016Concrete Problems in AI Safetycited by 1,582
- 2016On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minimacited by 1,337
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
- 2018Reconciling modern machine learning practice and the bias-variance trade-offcited by 919
24 more
- 2019Solving Rubik's Cube with a Robot Handcited by 699
- 2017The Implicit Bias of Gradient Descent on Separable Datacited by 649
- 2020Underspecification Presents Challenges for Credibility in Modern Machine Learningcited by 488
- 2019Leveraging Procedural Generation to Benchmark Reinforcement Learningcited by 478
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2018AI safety via debatecited by 384
- 2018Confounding variables can degrade generalization performance of radiological deep learning modelscited by 374
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2018Quantifying Generalization in Reinforcement Learningcited by 345
- 2016Cooperative Inverse Reinforcement Learningcited by 298
- 2020Pretrained Transformers Improve Out-of-Distribution Robustnesscited by 293
- 2021Exploring the Limits of Out-of-Distribution Detectioncited by 283
- 2020Implicit Bias of Gradient Descent for Wide Two-layer Neural Networks Trained with the Logistic Losscited by 267
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 250
- 2017Inverse Reward Designcited by 246
- 2018Women also Snowboard: Overcoming Bias in Captioning Modelscited by 236
- 2019Interpretations are useful: penalizing explanations to align neural networks with prior knowledgecited by 144
- 2018Supervising strong learners by amplifying weak expertscited by 139
- 2021Goal Misgeneralization in Deep Reinforcement Learningcited by 122
- 2019Optimal Policies Tend to Seek Powercited by 115
- 2019V-MPO: On-Policy Maximum a Posteriori Policy Optimization for Discrete and Continuous Controlcited by 85
- 2018Agents and Devices: A Relative Definition of Agencycited by 16
- 2016Responses to Critiques on Machine Learning of Criminality Perceptions (Addendum of arXiv:1611.04135)cited by 14
- 2022Learning Robust Real-Time Cultural Transmission without Human Datacited by 9
Built on by
Citing papers per year: 2022: 1; 2023: 19; 2024: 29; 2025: 31; 2026: 40.
120 papers.
Sort:
By area:
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2024Alignment faking in large language modelscited by 316
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewardscited by 232
- 2023Inverse Scaling: When Bigger Isn't Bettercited by 205
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023Model evaluation for extreme riskscited by 167
- 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 136
- 2023Harms from Increasingly Agentic Algorithmic Systemscited by 134
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 131
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 111
- 2024Robust agents learn causal world modelscited by 81
38 more
- 2024Open-Endedness is Essential for Artificial Superhuman Intelligencecited by 79
- 2025Utility Engineering: Analyzing and Controlling Emergent Value Systems in AIscited by 63
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
- 2023Managing extreme AI risks amid rapid progresscited by 48
- 2023Language Reward Modulation for Pretraining Reinforcement Learningcited by 42
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuningcited by 34
- 2025Inference-Time Reward Hacking in Large Language Modelscited by 32
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timecited by 32
- 2024The Probabilities Also Matter: A More Faithful Metric for Faithfulness of Free-Text Explanations in Large Language Modelscited by 29
- 2024Quantifying Feature Space Universality Across Large Language Models via Sparse Autoencoderscited by 25
- 2024From Lived Experience to Insight: Unpacking the Psychological Risks of Using AI Conversational Agentscited by 25
- 2023Power-seeking can be probable and predictive for trained agentscited by 23
- 2024The Reasons that Agents Act: Intention and Instrumental Goalscited by 23
- 2024The Shutdown Problem: An AI Engineering Puzzle for Decision Theoristscited by 22
- 2023Compositional Capabilities of Autoregressive Transformers: A Study on Synthetic, Interpretable Taskscited by 21
- 2023Understanding and Controlling a Maze-Solving Policy Networkcited by 19
- 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Reviewcited by 19
- 2024Planning in a recurrent neural network that plays Sokobancited by 17
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 17
- 2022Adversarial Cheap Talkcited by 16
- 2024Understanding the Learning Dynamics of Alignment with Human Feedbackcited by 15
- 2024Estimating the Probabilities of Rare Outputs in Language Modelscited by 15
- 2025Evaluating the Goal-Directedness of Large Language Modelscited by 15
- 2023Building Trustworthy NeuroSymbolic AI Systems: Consistency, Reliability, Explainability, and Safetycited by 14
- 2025Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystemcited by 14
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJackcited by 13
- 2025An alignment safety case sketch based on debatecited by 12
- 2023Guide Your Agent with Adaptive Multimodal Rewardscited by 10
- 2025Longitudinal Study on Social and Emotional Use of AI Conversational Agentcited by 10
- 2024Reward Generalization in RLHF: A Topological Perspectivecited by 9
- 2025The Singapore Consensus on Global AI Safety Research Prioritiescited by 9
- 2023A Review of the Evidence for Existential Risk from AI via Misaligned Power-Seekingcited by 7
- 2024Aligning Model Properties via Conformal Risk Controlcited by 7
- 2024Can DPO Learn Diverse Human Values? A Theoretical Scaling Lawcited by 7
- 2024On Logical Extrapolation for Mazes with Recurrent and Implicit Networkscited by 7
- 2024Towards Measuring Goal-Directedness in AI Systemscited by 7
- 2025AI Testing Should Account for Sophisticated Strategic Behaviourcited by 6
- 2025Deep Value Benchmark: Measuring Whether Models Generalize Deep Values or Shallow Preferencescited by 6
50 most cited of 120 All 120 (JSON)
- 2026LLM Agents Can Easily Tamper With Their Own Traces24 Sep 2026
- 2026Trustworthy Agentic AI: Failure Modes, Mitigation Strategies, and a Lifecycle Framework for Autonomous LLM Systems19 Sep 2026
- 2026Quantifying Overclaiming Propensity in Frontier LLM Agents17 Sep 2026
- 2026Norms at a Price: Why RL-Based Alignment Can Promise Conditional Compliance at Best7 Sep 2026
- 2026A Case Study on Emergent Cheating and Whistleblowing in Autonomous Research Swarms3 Sep 2026
- 2026Reducing Catastrophic Risk from AI with Systematic Monitoring and Evaluation of Rogue AI Progression2 Sep 2026
- 2026Debate Training Reduces Reward Hacking in RLAIF18 Aug 2026
- 2026Measuring Reward Hacking and Reasoning-Answer Decoupling Under Position-Confounded Optimization15 Aug 2026
- 2026Post-Training on Office Work Improves Software Engineering: A Behavioral Account of Cross-Domain Transfer3 Aug 2026
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectives24 Jul 2026
- 2026Estimating Rare Events in Language Models with Proper Evaluation20 Jul 2026
- 2026Innocuous-Seeming Data, Latent Ideology: Ideological Generalisation in Finetuned LLMs16 Jul 2026
38 more
- 2026Self-Aware Recursively Self-Improving Agents for Personal Singularity: A Goal-, Scope-, Tool-, and Benchmark-Driven Multi-Agent Architecture14 Jul 2026
- 2026When Does Reward Teach State? A Hidden-Automaton Instrument and a Group-Language Warning Signal11 Jul 2026
- 2026Inoculation Adapters: Improved Selective Generalization of Capabilities with Fewer Surprising Backdoors29 Jun 2026
- 2026Beyond Value Benchmarks: Measuring Value-Structure Alignment in Large Language Models via Symmetric Q-Sorts20 Jun 2026
- 2026Incoherent Values? Probing LLM Preferences Through Parametric Variation19 Jun 2026
- 2026Greed Is Learned: Visible Incentives as Reward-Hacking Triggers15 Jun 2026
- 2026The Impossibility of Eliciting Latent Knowledge10 Jun 2026
- 2026Instrumental convergence and power-seeking7 Jun 2026
- 2026Sycophancy Towards Researchers Drives Performative Misalignment7 Jun 2026
- 2026Agentic AI for Gravitational Wave Data Analysis: A Head-to-Head Comparison of Coding Agents Executing a Matched Filter Pipeline on Einstein Telescope Simulated Data27 May 2026
- 2026When Context Flips, Safety Breaks: Diagnosing Brittle Safety in Aligned Language Models27 May 2026
- 2026Voluntary Collusion with Secret Tools in Competing LLM Agents26 May 2026
- 2026Understanding Goal Generalisation in Sequential Reinforcement Learning22 May 2026
- 2026Response drift across frontier large language models14 May 2026
- 2026Do Androids Dream of Breaking the Game? Systematically Auditing AI Agent Benchmarks with BenchJack12 May 2026
- 2026Spurious Correlation Learning in Preference Optimization: Mechanisms, Consequences, and Mitigation via Tie Training11 May 2026
- 2026Why Does Agentic Safety Fail to Generalize Across Tasks?7 May 2026
- 2026Ambient Persuasion in a Deployed AI Agent: Unauthorized Escalation Following Routine Non-Adversarial Content Exposure29 Apr 2026
- 2026Activation Steering for Aligned Open-ended Generation without Sacrificing Coherence9 Apr 2026
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineering1 Apr 2026
- 2026"Dark Triad" Model Organisms of Misalignment: Narrow Fine-Tuning Mirrors Human Antisocial Behavior6 Mar 2026
- 2026When Do LLM Preferences Predict Downstream Behavior?21 Feb 2026
- 2026Mitigating loss of control in advanced AI systems through instrumental goal trajectories2 Feb 2026
- 2026Privacy Collapse: Benign Fine-Tuning Can Break Contextual Privacy in Language Models21 Jan 2026
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphs16 Jan 2026
- 2026AI Survival Stories: a Taxonomic Analysis of AI Existential Risk14 Jan 2026
- 2026Stagewise Reinforcement Learning and the Geometry of the Regret Landscape12 Jan 2026
- 2026AntiPaSTO: Self-Supervised Honesty Steering via Anti-Parallel Representations12 Jan 2026
- 2025Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystem9 Dec 2025
- 2025Toward a Safe Internet of Agents29 Nov 2025
- 2025Natural Emergent Misalignment from Reward Hacking in Production RL23 Nov 2025
- 2025Why Do Language Model Agents Whistleblow?21 Nov 2025
- 2025Deep Value Benchmark: Measuring Whether Models Generalize Deep Values or Shallow Preferences3 Nov 2025
- 2025An Aristotelian ontology of instrumental goals: Structural features to be managed and not failures to be eliminated29 Oct 2025
- 2025The Atomic Instruction Gap: Instruction-Tuned LLMs Struggle with Simple, Self-Contained Directives20 Oct 2025
- 2025Corrigibility Transformation: Constructing Goals That Accept Updates17 Oct 2025
- 2025Agentic Misalignment: How LLMs Could Be Insider Threats5 Oct 2025
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-time5 Oct 2025
50 newest of 120 All 120 (JSON)
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2024Alignment faking in large language modelscited by 316
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewardscited by 232
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 111
- 2025Inference-Time Reward Hacking in Large Language Modelscited by 32
- 2024Understanding the Learning Dynamics of Alignment with Human Feedbackcited by 15
- 2024Reward Generalization in RLHF: A Topological Perspectivecited by 9
- 2024Aligning Model Properties via Conformal Risk Controlcited by 7
- 2024Can DPO Learn Diverse Human Values? A Theoretical Scaling Lawcited by 7
- 2025Deep Value Benchmark: Measuring Whether Models Generalize Deep Values or Shallow Preferencescited by 6
- 2024Challenges and Future Directions of Data-Centric AI Alignmentcited by 5
12 most cited of 24 All 24 (JSON)
- 2026Debate Training Reduces Reward Hacking in RLAIF18 Aug 2026
- 2026Incoherent Values? Probing LLM Preferences Through Parametric Variation19 Jun 2026
- 2026When Context Flips, Safety Breaks: Diagnosing Brittle Safety in Aligned Language Models27 May 2026
- 2026Spurious Correlation Learning in Preference Optimization: Mechanisms, Consequences, and Mitigation via Tie Training11 May 2026
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineering1 Apr 2026
- 2026When Do LLM Preferences Predict Downstream Behavior?21 Feb 2026
- 2025Natural Emergent Misalignment from Reward Hacking in Production RL23 Nov 2025
- 2025Deep Value Benchmark: Measuring Whether Models Generalize Deep Values or Shallow Preferences3 Nov 2025
- 2025How Well Can Preference Optimization Generalize Under Noisy Feedback?1 Oct 2025
- 2025Clean First, Align Later: Benchmarking Preference Data Cleaning for Reliable LLM Alignment28 Sep 2025
- 2025The Anatomy of Alignment: Decomposing Preference Optimization by Steering Sparse Features16 Sep 2025
- 2025Towards Integrated Alignment8 Aug 2025
12 newest of 24 All 24 (JSON)
- 2025Agentic Misalignment: How LLMs Could Be Insider Threatscited by 136
- 2023Harms from Increasingly Agentic Algorithmic Systemscited by 134
- 2025Utility Engineering: Analyzing and Controlling Emergent Value Systems in AIscited by 63
- 2024The Reasons that Agents Act: Intention and Instrumental Goalscited by 23
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphscited by 17
- 2025Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystemcited by 14
- 2025Toward a Safe Internet of Agentscited by 6
- 2025Why Do Language Model Agents Whistleblow?cited by 4
- 2026Voluntary Collusion with Secret Tools in Competing LLM Agentscited by 4
- 2026Quantifying Overclaiming Propensity in Frontier LLM Agentscited by 2
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectivescited by 1
- 2026Why Does Agentic Safety Fail to Generalize Across Tasks?cited by 0
12 most cited of 16 All 16 (JSON)
- 2026LLM Agents Can Easily Tamper With Their Own Traces24 Sep 2026
- 2026Trustworthy Agentic AI: Failure Modes, Mitigation Strategies, and a Lifecycle Framework for Autonomous LLM Systems19 Sep 2026
- 2026Quantifying Overclaiming Propensity in Frontier LLM Agents17 Sep 2026
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectives24 Jul 2026
- 2026Self-Aware Recursively Self-Improving Agents for Personal Singularity: A Goal-, Scope-, Tool-, and Benchmark-Driven Multi-Agent Architecture14 Jul 2026
- 2026Agentic AI for Gravitational Wave Data Analysis: A Head-to-Head Comparison of Coding Agents Executing a Matched Filter Pipeline on Einstein Telescope Simulated Data27 May 2026
- 2026Voluntary Collusion with Secret Tools in Competing LLM Agents26 May 2026
- 2026Why Does Agentic Safety Fail to Generalize Across Tasks?7 May 2026
- 2026Institutional AI: Governing LLM Collusion in Multi-Agent Cournot Markets via Public Governance Graphs16 Jan 2026
- 2025Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystem9 Dec 2025
- 2025Toward a Safe Internet of Agents29 Nov 2025
- 2025Why Do Language Model Agents Whistleblow?21 Nov 2025
12 newest of 16 All 16 (JSON)
- 2025Emergent Risk Awareness in Rational Agents under Resource Constraintscited by 5
- 2025The Atomic Instruction Gap: Instruction-Tuned LLMs Struggle with Simple, Self-Contained Directivescited by 0
- 2026Measuring Reward Hacking and Reasoning-Answer Decoupling Under Position-Confounded Optimizationcited by 0
- 2026Measuring Reward Hacking and Reasoning-Answer Decoupling Under Position-Confounded Optimization15 Aug 2026
- 2025The Atomic Instruction Gap: Instruction-Tuned LLMs Struggle with Simple, Self-Contained Directives20 Oct 2025
- 2025Emergent Risk Awareness in Rational Agents under Resource Constraints29 May 2025
- 2023Guide Your Agent with Adaptive Multimodal Rewardscited by 10
- 2023Guide Your Agent with Adaptive Multimodal Rewards19 Sep 2023
- 2024Robust agents learn causal world modelscited by 81
- 2024Robust agents learn causal world models16 Feb 2024
- 2023Inverse Scaling: When Bigger Isn't Bettercited by 205
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023Model evaluation for extreme riskscited by 167
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 131
- 2024Open-Endedness is Essential for Artificial Superhuman Intelligencecited by 79
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
- 2023Managing extreme AI risks amid rapid progresscited by 48
- 2023Language Reward Modulation for Pretraining Reinforcement Learningcited by 42
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuningcited by 34
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timecited by 32
- 2024The Probabilities Also Matter: A More Faithful Metric for Faithfulness of Free-Text Explanations in Large Language Modelscited by 29
- 2024Quantifying Feature Space Universality Across Large Language Models via Sparse Autoencoderscited by 25
12 most cited of 74 All 74 (JSON)
- 2026Norms at a Price: Why RL-Based Alignment Can Promise Conditional Compliance at Best7 Sep 2026
- 2026A Case Study on Emergent Cheating and Whistleblowing in Autonomous Research Swarms3 Sep 2026
- 2026Reducing Catastrophic Risk from AI with Systematic Monitoring and Evaluation of Rogue AI Progression2 Sep 2026
- 2026Post-Training on Office Work Improves Software Engineering: A Behavioral Account of Cross-Domain Transfer3 Aug 2026
- 2026Estimating Rare Events in Language Models with Proper Evaluation20 Jul 2026
- 2026Innocuous-Seeming Data, Latent Ideology: Ideological Generalisation in Finetuned LLMs16 Jul 2026
- 2026When Does Reward Teach State? A Hidden-Automaton Instrument and a Group-Language Warning Signal11 Jul 2026
- 2026Inoculation Adapters: Improved Selective Generalization of Capabilities with Fewer Surprising Backdoors29 Jun 2026
- 2026Beyond Value Benchmarks: Measuring Value-Structure Alignment in Large Language Models via Symmetric Q-Sorts20 Jun 2026
- 2026Greed Is Learned: Visible Incentives as Reward-Hacking Triggers15 Jun 2026
- 2026The Impossibility of Eliciting Latent Knowledge10 Jun 2026
- 2026Instrumental convergence and power-seeking7 Jun 2026
12 newest of 74 All 74 (JSON)