Flames: Benchmarking Value Alignment of LLMs in Chinese
On the map: LLM alignment / RLHF / preference optimisation → Human values and AI feedback alignment
also in 1 more
Abstract (arXiv)
The widespread adoption of large language models (LLMs) across various regions underscores the urgent need to evaluate their alignment with human values. Current benchmarks, however, fall short of effectively uncovering safety vulnerabilities in LLMs. Despite numerous models achieving high scores and 'topping the chart' in these evaluations, there is still a significant gap in LLMs' deeper alignment with human values and achieving genuine harmlessness. To this end, this paper proposes a value alignment benchmark named Flames, which encompasses both common harmlessness principles and a unique morality dimension that integrates specific Chinese values such as harmony. Accordingly, we carefully design adversarial prompts that incorporate complex scenarios and jailbreaking methods, mostly with implicit malice. By prompting 17 mainstream LLMs, we obtain model responses and rigorously annotate them for detailed evaluation. Our findings indicate that all the evaluated LLMs demonstrate relatively poor performance on Flames, particularly in the safety and fairness dimensions. We also develop a lightweight specified scorer capable of scoring LLMs across multiple dimensions to efficiently evaluate new models on the benchmark. The complexity of Flames has far exceeded existing benchmarks, setting a new challenge for contemporary LLMs and highlighting the need for further alignment of LLMs. Our benchmark is publicly available at https://github.com/AIFlames/Flames.
Key facts. Cited by 37 papers in the map (data through 14 Oct 2026). Placed in Human values and AI feedback alignment, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 22 of its 35 references that are in the map. First posted on arXiv 12 Nov 2023.
Builds on
22 of 35 references.
Closest ancestors · 1
Same direction, newest first
Other references · 21
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,055
- 2021GLM: General Language Model Pretraining with Autoregressive Blank Infillingcited by 1,031
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2023Baichuan 2: Open Large-scale Language Modelscited by 670
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 531
- 2020Artificial Intelligence, Values and Alignmentcited by 448
9 more
- 2018Scalable agent alignment via reward modeling: a research directioncited by 447
- 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 333
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
- 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 158
- 2017Deceiving Google's Perspective API Built for Detecting Toxic Commentscited by 102
- 2023CValues: Measuring the Values of Chinese Large Language Models from Safety to Responsibilitycited by 85
- 2022COLD: A Benchmark for Chinese Offensive Language Detectioncited by 76
- 2021CX-ToM: Counterfactual Explanations with Theory-of-Mind for Enhancing Human Trust in Image Recognition Modelscited by 20
- 2023Towards Better Instruction Following Language Models for Chinese: Investigating the Impact of Training Data and Evaluationcited by 20
Built on by
Citing papers per year: 2024: 5; 2025: 19; 2026: 13.
37 papers.
Sort:
By area:
- 2024VLMEvalKit: An Open-Source Toolkit for Evaluating Large Multi-Modality Modelscited by 455
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 306
- 2024From GPT-4 to Gemini and Beyond: Assessing the Landscape of MLLMs on Generalizability, Trustworthiness and Causality through Four Modalitiescited by 19
- 2024Raising the Bar: Investigating the Values of Large Language Models via Generative Evolving Testingcited by 17
- 2025VITAL: A New Dataset for Benchmarking Pluralistic Alignment in Healthcarecited by 17
- 2025SafeVid: Toward Safety Aligned Video Large Multimodal Modelscited by 9
- 2025Value Compass Benchmarks: A Platform for Fundamental and Validated Evaluation of LLMs Valuescited by 7
- 2024Edu-Values: Towards Evaluating the Chinese Education Values of Large Language Modelscited by 5
- 2025Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectivescited by 5
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigmcited by 5
- 2025Made-in China, Thinking in America:U.S. Values Persist in Chinese LLMscited by 5
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patternscited by 5
25 more
- 2026Positive Alignment: Artificial Intelligence for Human Flourishingcited by 5
- 2025Probing the Robustness of Large Language Models Safety to Latent Perturbationscited by 4
- 2025C-VARC: A Large-Scale Chinese Value Rule Corpus for Value Alignment of Large Language Modelscited by 3
- 2026FinSafetyBench: Evaluating LLM Safety in Real-World Financial Scenarioscited by 3
- 2025REAL: Benchmarking Abilities of Large Language Models for Housing Transactions and Servicescited by 2
- 2025Social Bias in Multilingual Language Models: A Surveycited by 2
- 2026TildeOpen LLM: Leveraging Curriculum Learning to Achieve Equitable Language Representationcited by 2
- 2026Structuring the Space of Sociotechnical Alignmentcited by 2
- 2025SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarkingcited by 1
- 2025Implicit Values Embedded in How Humans and LLMs Complete Subjective Everyday Taskscited by 1
- 2025MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMscited by 1
- 2025DREAM: Dynamic Red-teaming across Environments for AI Modelscited by 1
- 2025SurvSurf: a partially monotonic neural network for first-hitting time prediction of intermittently observed discrete and continuous sequential eventscited by 0
- 2025NurValues: Real-World Nursing Values Evaluation for Large Language Models in Clinical Contextcited by 0
- 2025HKGAI-V1: Towards Regional Sovereign Large Language Model for Hong Kongcited by 0
- 2025COSMO-RL: Towards Trustworthy LMRMs via Joint Safety and Stabilitycited by 0
- 2025JT-Safe: Intrinsically Enhancing the Safety and Trustworthiness of LLMscited by 0
- 2026Towards Cross-lingual Values Judgment: A Consensus-Pluralism Perspectivecited by 0
- 2026ThaiSafetyBench: Assessing Language Model Safety in Thai Cultural Contextscited by 0
- 2026Mechanistic Origin of Moral Indifference in Language Modelscited by 0
- 2026Towards Context-Invariant Safety Alignment for Large Language Modelscited by 0
- 2026JT-SAFE-V2: Safety-by-Design Foundation Model with World-Context Datacited by 0
- 2026The Safeguard Worked. Is the LLM System Safer?cited by 0
- 2026Representational alignment yields generalizable safety in language modelscited by 0
- 2026Retrieval-Augmented Large Language Model Decision-Making for Autonomous Driving Guided by Chinese Philosophical Wisdomcited by 0
- 2026Retrieval-Augmented Large Language Model Decision-Making for Autonomous Driving Guided by Chinese Philosophical Wisdom2 Oct 2026
- 2026Representational alignment yields generalizable safety in language models3 Sep 2026
- 2026The Safeguard Worked. Is the LLM System Safer?1 Sep 2026
- 2026Structuring the Space of Sociotechnical Alignment2 Jun 2026
- 2026JT-SAFE-V2: Safety-by-Design Foundation Model with World-Context Data23 May 2026
- 2026Towards Context-Invariant Safety Alignment for Large Language Models20 May 2026
- 2026Positive Alignment: Artificial Intelligence for Human Flourishing11 May 2026
- 2026FinSafetyBench: Evaluating LLM Safety in Real-World Financial Scenarios1 May 2026
- 2026Mechanistic Origin of Moral Indifference in Language Models16 Mar 2026
- 2026TildeOpen LLM: Leveraging Curriculum Learning to Achieve Equitable Language Representation9 Mar 2026
- 2026ThaiSafetyBench: Assessing Language Model Safety in Thai Cultural Contexts5 Mar 2026
- 2026Towards Cross-lingual Values Judgment: A Consensus-Pluralism Perspective19 Feb 2026
25 more
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patterns2 Jan 2026
- 2025DREAM: Dynamic Red-teaming across Environments for AI Models22 Dec 2025
- 2025Made-in China, Thinking in America:U.S. Values Persist in Chinese LLMs13 Dec 2025
- 2025MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMs10 Nov 2025
- 2025JT-Safe: Intrinsically Enhancing the Safety and Trustworthiness of LLMs20 Oct 2025
- 2025COSMO-RL: Towards Trustworthy LMRMs via Joint Safety and Stability5 Oct 2025
- 2025Implicit Values Embedded in How Humans and LLMs Complete Subjective Everyday Tasks3 Oct 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025Social Bias in Multilingual Language Models: A Survey27 Aug 2025
- 2025SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarking21 Aug 2025
- 2025HKGAI-V1: Towards Regional Sovereign Large Language Model for Hong Kong14 Jul 2025
- 2025REAL: Benchmarking Abilities of Large Language Models for Housing Transactions and Services4 Jul 2025
- 2025Probing the Robustness of Large Language Models Safety to Latent Perturbations19 Jun 2025
- 2025Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectives11 Jun 2025
- 2025C-VARC: A Large-Scale Chinese Value Rule Corpus for Value Alignment of Large Language Models2 Jun 2025
- 2025SafeVid: Toward Safety Aligned Video Large Multimodal Models17 May 2025
- 2025NurValues: Real-World Nursing Values Evaluation for Large Language Models in Clinical Context13 May 2025
- 2025SurvSurf: a partially monotonic neural network for first-hitting time prediction of intermittently observed discrete and continuous sequential events7 Apr 2025
- 2025VITAL: A New Dataset for Benchmarking Pluralistic Alignment in Healthcare19 Feb 2025
- 2025Value Compass Benchmarks: A Platform for Fundamental and Validated Evaluation of LLMs Values13 Jan 2025
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents19 Dec 2024
- 2024Edu-Values: Towards Evaluating the Chinese Education Values of Large Language Models19 Sep 2024
- 2024VLMEvalKit: An Open-Source Toolkit for Evaluating Large Multi-Modality Models16 Jul 2024
- 2024Raising the Bar: Investigating the Values of Large Language Models via Generative Evolving Testing20 Jun 2024
- 2024From GPT-4 to Gemini and Beyond: Assessing the Landscape of MLLMs on Generalizability, Trustworthiness and Causality through Four Modalities26 Jan 2024
- 2025VITAL: A New Dataset for Benchmarking Pluralistic Alignment in Healthcarecited by 17
- 2025Probing the Robustness of Large Language Models Safety to Latent Perturbationscited by 4
- 2025C-VARC: A Large-Scale Chinese Value Rule Corpus for Value Alignment of Large Language Modelscited by 3
- 2026Towards Context-Invariant Safety Alignment for Large Language Modelscited by 0
- 2026Representational alignment yields generalizable safety in language modelscited by 0
- 2026Representational alignment yields generalizable safety in language models3 Sep 2026
- 2026Towards Context-Invariant Safety Alignment for Large Language Models20 May 2026
- 2025Probing the Robustness of Large Language Models Safety to Latent Perturbations19 Jun 2025
- 2025C-VARC: A Large-Scale Chinese Value Rule Corpus for Value Alignment of Large Language Models2 Jun 2025
- 2025VITAL: A New Dataset for Benchmarking Pluralistic Alignment in Healthcare19 Feb 2025
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 306
- 2025Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectivescited by 5
- 2025SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarkingcited by 1
- 2025DREAM: Dynamic Red-teaming across Environments for AI Modelscited by 1
- 2025DREAM: Dynamic Red-teaming across Environments for AI Models22 Dec 2025
- 2025SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarking21 Aug 2025
- 2025Multi-level Value Alignment in Agentic AI Systems: Survey and Perspectives11 Jun 2025
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents19 Dec 2024
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patternscited by 5
- 2026FinSafetyBench: Evaluating LLM Safety in Real-World Financial Scenarioscited by 3
- 2025MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMscited by 1
- 2026ThaiSafetyBench: Assessing Language Model Safety in Thai Cultural Contextscited by 0
- 2026FinSafetyBench: Evaluating LLM Safety in Real-World Financial Scenarios1 May 2026
- 2026ThaiSafetyBench: Assessing Language Model Safety in Thai Cultural Contexts5 Mar 2026
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patterns2 Jan 2026
- 2025MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMs10 Nov 2025
- 2024VLMEvalKit: An Open-Source Toolkit for Evaluating Large Multi-Modality Modelscited by 455
- 2024Raising the Bar: Investigating the Values of Large Language Models via Generative Evolving Testingcited by 17
- 2025Value Compass Benchmarks: A Platform for Fundamental and Validated Evaluation of LLMs Valuescited by 7
- 2024Edu-Values: Towards Evaluating the Chinese Education Values of Large Language Modelscited by 5
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigmcited by 5
- 2025Made-in China, Thinking in America:U.S. Values Persist in Chinese LLMscited by 5
- 2026Positive Alignment: Artificial Intelligence for Human Flourishingcited by 5
- 2025REAL: Benchmarking Abilities of Large Language Models for Housing Transactions and Servicescited by 2
- 2025Social Bias in Multilingual Language Models: A Surveycited by 2
- 2026TildeOpen LLM: Leveraging Curriculum Learning to Achieve Equitable Language Representationcited by 2
- 2026Structuring the Space of Sociotechnical Alignmentcited by 2
- 2025Implicit Values Embedded in How Humans and LLMs Complete Subjective Everyday Taskscited by 1
12 most cited of 20 All 20 (JSON)
- 2026The Safeguard Worked. Is the LLM System Safer?1 Sep 2026
- 2026Structuring the Space of Sociotechnical Alignment2 Jun 2026
- 2026JT-SAFE-V2: Safety-by-Design Foundation Model with World-Context Data23 May 2026
- 2026Positive Alignment: Artificial Intelligence for Human Flourishing11 May 2026
- 2026Mechanistic Origin of Moral Indifference in Language Models16 Mar 2026
- 2026TildeOpen LLM: Leveraging Curriculum Learning to Achieve Equitable Language Representation9 Mar 2026
- 2026Towards Cross-lingual Values Judgment: A Consensus-Pluralism Perspective19 Feb 2026
- 2025Made-in China, Thinking in America:U.S. Values Persist in Chinese LLMs13 Dec 2025
- 2025JT-Safe: Intrinsically Enhancing the Safety and Trustworthiness of LLMs20 Oct 2025
- 2025Implicit Values Embedded in How Humans and LLMs Complete Subjective Everyday Tasks3 Oct 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025Social Bias in Multilingual Language Models: A Survey27 Aug 2025
12 newest of 20 All 20 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Adversarial Alignment: Ensuring Value Consistency in Large Language Models for Sensitive Domains
- 2024OpenEval: Benchmarking Chinese LLMs across Capability, Alignment and Safety
- 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinese
- 2023TencentLLMEval: A Hierarchical Evaluation of Real-World Capabilities for Human-Aligned LLMs
- 2023Large Language Model Alignment: A Survey
- 2025Multi-Value Alignment for LLMs via Value Decorrelation and Extrapolation
- 2025Beyond Single-Sentence Prompts: Upgrading Value Alignment Benchmarks with Dialogues and Stories
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges