Pretraining Language Models with Human Preferences
On the map: LLM alignment / RLHF / preference optimisation → Human values and AI feedback alignment
Abstract (arXiv)
Language models (LMs) are pretrained to imitate internet text, including content that would violate human preferences if generated by an LM: falsehoods, offensive comments, personally identifiable information, low-quality or buggy code, and more. Here, we explore alternative objectives for pretraining LMs in a way that also guides them to generate text aligned with human preferences. We benchmark five objectives for pretraining with human feedback across three tasks and study how they affect the trade-off between alignment and capabilities of pretrained LMs. We find a Pareto-optimal and simple approach among those we explored: conditional training, or learning distribution over tokens conditional on their human preference scores given by a reward model. Conditional training reduces the rate of undesirable content by up to an order of magnitude, both when generating without a prompt and with an adversarially-chosen prompt. Moreover, conditional training maintains the downstream task performance of standard LM pretraining, both before and after task-specific finetuning. Pretraining with human feedback results in much better preference satisfaction than standard LM pretraining followed by finetuning with feedback, i.e., learning and then unlearning undesirable behavior. Our results suggest that we should move beyond imitation learning when pretraining LMs and incorporate human preferences from the start of training.
Key facts. Cited by 245 papers in the map (data through 7 Oct 2026). Placed in Human values and AI feedback alignment, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 62 of its 98 references that are in the map. First posted on arXiv 16 Feb 2023.
Builds on
62 of 98 references.
Closest ancestors · 1
Same direction, newest first
Other references · 61
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
38 more
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2020Offline Reinforcement Learning: Tutorial, Review, and Perspectives on Open Problemscited by 1,873
- 2020Conservative Q-Learning for Offline Reinforcement Learningcited by 1,777
- 2021Decision Transformer: Reinforcement Learning via Sequence Modelingcited by 1,528
- 2021Multitask Prompted Training Enables Zero-Shot Task Generalizationcited by 1,462
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2018Hierarchical Neural Story Generationcited by 1,182
- 2015A Diversity-Promoting Objective Function for Neural Conversation Modelscited by 1,068
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2017SemEval-2017 Task 1: Semantic Textual Similarity - Multilingual and Cross-lingual Focused Evaluationcited by 998
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
- 2018Neural Network Acceptability Judgmentscited by 952
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2019CTRL: A Conditional Transformer Language Model for Controllable Generationcited by 754
- 2019Advantage-Weighted Regression: Simple and Scalable Off-Policy Reinforcement Learningcited by 750
- 2020AWAC: Accelerating Online Reinforcement Learning with Offline Datasetscited by 647
- 2021Offline Reinforcement Learning as One Big Sequence Modeling Problemcited by 636
- 2019Using Self-Supervised Learning Can Improve Model Robustness and Uncertaintycited by 511
- 2019Neural Text Generation with Unlikelihood Trainingcited by 489
- 2018Texygen: A Benchmarking Platform for Text Generation Modelscited by 484
- 2019Nuanced Metrics for Measuring Unintended Bias with Real Data for Text Classificationcited by 396
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 376
- 2020Pretrained Transformers Improve Out-of-Distribution Robustnesscited by 293
- 2022Teaching language models to support answers with verified quotescited by 290
- 2022The case for 4-bit precision: k-bit Inference Scaling Lawscited by 247
- 2022Quark: Controllable Text Generation with Reinforced Unlearningcited by 236
- 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 187
- 2021RvS: What is Essential for Offline RL via Supervised Learning?cited by 184
- 2021Process for Adapting Language Models to Society (PALMS) with Values-Targeted Datasetscited by 179
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2020Recipes for Safety in Open-domain Chatbotscited by 168
- 2019Distilling Task-Specific Knowledge from BERT into Simple Neural Networkscited by 152
- 2017Controlling Linguistic Style Aspects in Neural Language Generationcited by 147
- 2022Offline RL for Natural Language Generation with Implicit Language Q Learningcited by 137
- 2022RL with KL penalties is better viewed as Bayesian inferencecited by 130
50 most cited of 61 All 61 (JSON)
Built on by
Citing papers per year: 2023: 67; 2024: 94; 2025: 54; 2026: 30.
245 papers.
Sort:
By area:
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,800
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2023PaLM 2 Technical Reportcited by 1,154
- 2023Teaching Large Language Models to Self-Debugcited by 963
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 951
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 738
- 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 608
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
38 more
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
- 2023Fine-Grained Human Feedback Gives Better Rewards for Language Model Trainingcited by 399
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Promptscited by 368
- 2024KTO: Model Alignment as Prospect Theoretic Optimizationcited by 256
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2023Certifying LLM Safety against Adversarial Promptingcited by 248
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 242
- 2023Automatically Correcting Large Language Models: Surveying the landscape of diverse self-correction strategiescited by 236
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewardscited by 232
- 2024V-STaR: Training Verifiers for Self-Taught Reasonerscited by 214
- 2024ArCHer: Training Language Model Agents via Hierarchical Multi-Turn RLcited by 212
- 2023Inverse Scaling: When Bigger Isn't Bettercited by 205
- 2023FLASK: Fine-grained Language Model Evaluation based on Alignment Skill Setscited by 198
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 189
- 2023Beyond Reverse KL: Generalizing Direct Preference Optimization with Diverse Divergence Constraintscited by 174
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 173
- 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 162
- 2024QuRating: Selecting High-Quality Data for Training Language Modelscited by 153
- 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fastcited by 149
- 2024Jailbreaking Attack against Multimodal Large Language Modelcited by 128
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 111
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2024RLHF Deciphered: A Critical Analysis of Reinforcement Learning from Human Feedback for LLMscited by 89
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 89
- 2023Exploring the Impact of Instruction Data Scaling on Large Language Models: An Empirical Study on Real-World Use Casescited by 85
- 2024Perplexed by Perplexity: Perplexity-Based Data Pruning With Small Reference Modelscited by 83
- 2023Aligning Large Language Models through Synthetic Feedbackcited by 75
- 2023Eight Things to Know about Large Language Modelscited by 73
- 2024FlipAttack: Jailbreak LLMs via Flippingcited by 73
- 2024Foundational Autoraters: Taming Large Language Models for Better Automatic Evaluationcited by 72
- 2024CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completioncited by 70
- 2024Can LLMs Learn from Previous Mistakes? Investigating LLMs' Errors to Boost for Reasoningcited by 69
- 2024Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defensescited by 68
- 2024Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Trainingcited by 67
- 2024Intention Analysis Makes LLMs A Good Jailbreak Defendercited by 64
- 2023Jailbreaking GPT-4V via Self-Adversarial Attacks with System Promptscited by 62
50 most cited of 245 All 245 (JSON)
- 2026Tokenized Key-Gated Adapter Routing: A Secure Access Control Mechanism Against Private Data Leakage in LLMs28 Sep 2026
- 2026Decoupling Token Roles in Autoregressive Pretraining27 Sep 2026
- 2026The Geometry of Refusal: Why Post-Hoc Safety Is Fragile and Pretraining-Time Safety Persists7 Sep 2026
- 2026Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs21 Jul 2026
- 2026Be Your Own Teacher: Steering Protein Language Models via Unsupervised Reward Optimization17 Jun 2026
- 2026PolyAlign: Conditional Human-Distribution Alignment11 Jun 2026
- 2026THRD: A Training-Free Multi-Turn Defense Framework for Jailbreak Attacks on Large Language Models1 Jun 2026
- 2026In-Context Reward Adaptation for Robust Preference Modeling28 May 2026
- 2026Forgetting in Language Models: Capacity, Optimization, and Self-Generated Replay25 May 2026
- 2026Introspective X Training: Feedback Conditioning Improves Scaling Across all LLM Training Stages19 May 2026
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfer12 May 2026
- 2026Split the Differences, Pool the Rest: Provably Efficient Multi-Objective Imitation12 May 2026
38 more
- 2026Re-Triggering Safeguards within LLMs for Jailbreak Detection11 May 2026
- 2026Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing11 May 2026
- 2026Assert, don't describe: Linguistic features that shift LLM reasoning about animal welfare30 Apr 2026
- 2026Bye Bye Perspective API: Lessons for Building and Governing Measurement Infrastructure28 Apr 2026
- 2026Thoughts-as-Planning: Latent World Models for Chain-of-Thoughts Optimization via Reinforcement Planning27 Apr 2026
- 2026Adaptive Instruction Composition for Automated LLM Red-Teaming22 Apr 2026
- 2026Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion11 Apr 2026
- 2026Scaling Reward Modeling without Human Supervision11 Feb 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2026RACC: Representation-Aware Coverage Criteria for LLM Safety Testing2 Feb 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2026Self-Improving Pretraining: using post-trained models to pretrain better models29 Jan 2026
- 2026Reward Models Inherit Value Biases from Pretraining28 Jan 2026
- 2026GRIP: Algorithm-Agnostic Machine Unlearning for Mixture-of-Experts via Geometric Router Constraints23 Jan 2026
- 2026MAPLE: Metadata Conditioned LLM Pretraining for Locale-Aware Question Answering21 Jan 2026
- 2026Objective Matters: Fine-Tuning Objectives Shape Safety, Robustness, and Persona Drift19 Jan 2026
- 2026When Should We Introduce Safety Interventions During Pretraining?11 Jan 2026
- 2026Crafting Adversarial Inputs for Large Vision-Language Models Using Black-Box Optimization5 Jan 2026
- 2025Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?30 Dec 2025
- 2025EntroPIC: Towards Stable Long-Term Training of LLMs via Entropy Stabilization with Proportional-Integral Control19 Nov 2025
- 2025From Model Training to Model Raising12 Nov 2025
- 2025Too Good to be Bad: On the Failure of LLMs to Role-Play Villains7 Nov 2025
- 2025Best Practices for Biorisk Evaluations on Open-Weight Bio-Foundation Models31 Oct 2025
- 2025An Empirical Study of Sample Selection Strategies for Large Language Model Repair23 Oct 2025
- 2025Learnable Game-theoretic Policy Optimization for Data-centric Self-explanation Rationalization15 Oct 2025
- 2025Keep Calm and Avoid Harmful Content: Concept Alignment and Latent Manipulation Towards Safer Answers14 Oct 2025
- 2025Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models9 Oct 2025
- 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment6 Oct 2025
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-time5 Oct 2025
- 2025Machine Learning for Detection and Analysis of Novel LLM Jailbreaks2 Oct 2025
- 2025GALAX: Graph-Augmented Language Model for Explainable Reinforcement-Guided Subgraph Reasoning in Precision Medicine25 Sep 2025
- 2025X-Teaming Evolutionary M2S: Automated Discovery of Multi-turn to Single-turn Jailbreak Templates10 Sep 2025
- 2025Evaluating Language Model Reasoning about Confidential Information27 Aug 2025
- 2025Universal and Transferable Adversarial Attack on Large Language Models Using Exponentiated Gradient Descent20 Aug 2025
- 2025BeyondWeb: Lessons from Scaling Synthetic Data for Trillion-scale Pretraining14 Aug 2025
- 2025Listwise Direct Preference Optimization with Multi-Dimensional Preference Mixing24 Jun 2025
- 2025GRAF: Multi-turn Jailbreaking via Global Refinement and Active Fabrication22 Jun 2025
- 2025Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectives11 Jun 2025
50 newest of 245 All 245 (JSON)
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 951
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 738
- 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 608
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
- 2023Fine-Grained Human Feedback Gives Better Rewards for Language Model Trainingcited by 399
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewardscited by 232
- 2023FLASK: Fine-grained Language Model Evaluation based on Alignment Skill Setscited by 198
- 2023Beyond Reverse KL: Generalizing Direct Preference Optimization with Diverse Divergence Constraintscited by 174
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 173
12 most cited of 67 All 67 (JSON)
- 2026The Geometry of Refusal: Why Post-Hoc Safety Is Fragile and Pretraining-Time Safety Persists7 Sep 2026
- 2026Be Your Own Teacher: Steering Protein Language Models via Unsupervised Reward Optimization17 Jun 2026
- 2026PolyAlign: Conditional Human-Distribution Alignment11 Jun 2026
- 2026In-Context Reward Adaptation for Robust Preference Modeling28 May 2026
- 2026Introspective X Training: Feedback Conditioning Improves Scaling Across all LLM Training Stages19 May 2026
- 2026Scaling Reward Modeling without Human Supervision11 Feb 2026
- 2026Reward Models Inherit Value Biases from Pretraining28 Jan 2026
- 2026Objective Matters: Fine-Tuning Objectives Shape Safety, Robustness, and Persona Drift19 Jan 2026
- 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment6 Oct 2025
- 2025Universal and Transferable Adversarial Attack on Large Language Models Using Exponentiated Gradient Descent20 Aug 2025
- 2025Listwise Direct Preference Optimization with Multi-Dimensional Preference Mixing24 Jun 2025
- 2025Adaptive Batch-Wise Sample Scheduling for Direct Preference Optimization8 Jun 2025
12 newest of 67 All 67 (JSON)
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2023Certifying LLM Safety against Adversarial Promptingcited by 248
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 242
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 189
- 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 162
- 2024Jailbreaking Attack against Multimodal Large Language Modelcited by 128
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 111
- 2024FlipAttack: Jailbreak LLMs via Flippingcited by 73
- 2024CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completioncited by 70
- 2024Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defensescited by 68
12 most cited of 52 All 52 (JSON)
- 2026Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs21 Jul 2026
- 2026THRD: A Training-Free Multi-Turn Defense Framework for Jailbreak Attacks on Large Language Models1 Jun 2026
- 2026Re-Triggering Safeguards within LLMs for Jailbreak Detection11 May 2026
- 2026Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing11 May 2026
- 2026Adaptive Instruction Composition for Automated LLM Red-Teaming22 Apr 2026
- 2026Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion11 Apr 2026
- 2026RACC: Representation-Aware Coverage Criteria for LLM Safety Testing2 Feb 2026
- 2026When Should We Introduce Safety Interventions During Pretraining?11 Jan 2026
- 2025Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?30 Dec 2025
- 2025Keep Calm and Avoid Harmful Content: Concept Alignment and Latent Manipulation Towards Safer Answers14 Oct 2025
- 2025Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models9 Oct 2025
- 2025Machine Learning for Detection and Analysis of Novel LLM Jailbreaks2 Oct 2025
12 newest of 52 All 52 (JSON)
- 2023PaLM 2 Technical Reportcited by 1,154
- 2023Teaching Large Language Models to Self-Debugcited by 963
- 2024KTO: Model Alignment as Prospect Theoretic Optimizationcited by 256
- 2023Automatically Correcting Large Language Models: Surveying the landscape of diverse self-correction strategiescited by 236
- 2024V-STaR: Training Verifiers for Self-Taught Reasonerscited by 214
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 89
- 2024Can LLMs Learn from Previous Mistakes? Investigating LLMs' Errors to Boost for Reasoningcited by 69
- 2025CritiQ: Mining Data Quality Criteria from Human Preferencescited by 6
- 2023The Inner Sentiments of a Thoughtcited by 4
- 2025Evaluating Language Model Reasoning about Confidential Informationcited by 3
- 2025GALAX: Graph-Augmented Language Model for Explainable Reinforcement-Guided Subgraph Reasoning in Precision Medicinecited by 0
- 2026Assert, don't describe: Linguistic features that shift LLM reasoning about animal welfarecited by 0
- 2026Assert, don't describe: Linguistic features that shift LLM reasoning about animal welfare30 Apr 2026
- 2025GALAX: Graph-Augmented Language Model for Explainable Reinforcement-Guided Subgraph Reasoning in Precision Medicine25 Sep 2025
- 2025Evaluating Language Model Reasoning about Confidential Information27 Aug 2025
- 2025CritiQ: Mining Data Quality Criteria from Human Preferences26 Feb 2025
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan 2025
- 2024Can LLMs Learn from Previous Mistakes? Investigating LLMs' Errors to Boost for Reasoning29 Mar 2024
- 2024V-STaR: Training Verifiers for Self-Taught Reasoners9 Feb 2024
- 2024KTO: Model Alignment as Prospect Theoretic Optimization2 Feb 2024
- 2023Automatically Correcting Large Language Models: Surveying the landscape of diverse self-correction strategies6 Aug 2023
- 2023The Inner Sentiments of a Thought4 Jul 2023
- 2023PaLM 2 Technical Report17 May 2023
- 2023Teaching Large Language Models to Self-Debug11 Apr 2023
- 2024ArCHer: Training Language Model Agents via Hierarchical Multi-Turn RLcited by 212
- 2025A sketch of an AI control safety casecited by 36
- 2024The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Modelscited by 20
- 2025WiseMind: a knowledge-guided multi-agent framework for accurate and empathetic psychiatric diagnosiscited by 4
- 2025Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectivescited by 4
- 2024Limitations of Agents Simulated by Predictive Modelscited by 1
- 2025Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectives11 Jun 2025
- 2025WiseMind: a knowledge-guided multi-agent framework for accurate and empathetic psychiatric diagnosis28 Feb 2025
- 2025A sketch of an AI control safety case28 Jan 2025
- 2024The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models25 Jul 2024
- 2024ArCHer: Training Language Model Agents via Hierarchical Multi-Turn RL29 Feb 2024
- 2024Limitations of Agents Simulated by Predictive Models8 Feb 2024
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Promptscited by 368
- 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fastcited by 149
- 2024Safeguarding Vision-Language Models Against Patched Visual Prompt Injectorscited by 26
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?cited by 22
- 2024Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Modelscited by 11
- 2026Crafting Adversarial Inputs for Large Vision-Language Models Using Black-Box Optimizationcited by 0
- 2026Crafting Adversarial Inputs for Large Vision-Language Models Using Black-Box Optimization5 Jan 2026
- 2024Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models27 Nov 2024
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?27 May 2024
- 2024Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors17 May 2024
- 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast13 Feb 2024
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov 2023
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2023Inverse Scaling: When Bigger Isn't Bettercited by 205
- 2024QuRating: Selecting High-Quality Data for Training Language Modelscited by 153
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2023Exploring the Impact of Instruction Data Scaling on Large Language Models: An Empirical Study on Real-World Use Casescited by 85
- 2024Perplexed by Perplexity: Perplexity-Based Data Pruning With Small Reference Modelscited by 83
- 2023Eight Things to Know about Large Language Modelscited by 73
- 2024Foundational Autoraters: Taming Large Language Models for Better Automatic Evaluationcited by 72
- 2024Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Trainingcited by 67
- 2023When Large Language Models contradict humans? Large Language Models' Sycophantic Behaviourcited by 61
12 most cited of 92 All 92 (JSON)
- 2026Tokenized Key-Gated Adapter Routing: A Secure Access Control Mechanism Against Private Data Leakage in LLMs28 Sep 2026
- 2026Decoupling Token Roles in Autoregressive Pretraining27 Sep 2026
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfer12 May 2026
- 2026Bye Bye Perspective API: Lessons for Building and Governing Measurement Infrastructure28 Apr 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2026MAPLE: Metadata Conditioned LLM Pretraining for Locale-Aware Question Answering21 Jan 2026
- 2025EntroPIC: Towards Stable Long-Term Training of LLMs via Entropy Stabilization with Proportional-Integral Control19 Nov 2025
- 2025From Model Training to Model Raising12 Nov 2025
- 2025Too Good to be Bad: On the Failure of LLMs to Role-Play Villains7 Nov 2025
- 2025Best Practices for Biorisk Evaluations on Open-Weight Bio-Foundation Models31 Oct 2025
- 2025An Empirical Study of Sample Selection Strategies for Large Language Model Repair23 Oct 2025
12 newest of 92 All 92 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2025P-Aligner: Enabling Pre-Alignment of Language Models via Principled Instruction Synthesis
- 2024A Survey on Human Preference Learning for Large Language Models
- 2023Training Language Models with Language Feedback at Scale
- 2023Aligning Language Models with Offline Learning from Human Feedback
- 2024A Systematic Examination of Preference Learning through the Lens of Instruction-Following
- 2024Dissecting Human and LLM Preferences
- 2024Hybrid Preferences: Learning to Route Instances for Human vs. AI Feedback
- 2024Fairer Preferences Elicit Improved Human-Aligned Large Language Model Judgments