SoFA: Shielded On-the-fly Alignment via Priority Rule Following
On the map: LLM alignment / RLHF / preference optimisation → LLM preference optimization methods
Abstract (arXiv)
The alignment problem in Large Language Models (LLMs) involves adapting them to the broad spectrum of human values. This requirement challenges existing alignment methods due to diversity of preferences and regulatory standards. This paper introduces a novel alignment paradigm, priority rule following, which defines rules as the primary control mechanism in each dialog, prioritizing them over user instructions. Our preliminary analysis reveals that even the advanced LLMs, such as GPT-4, exhibit shortcomings in understanding and prioritizing the rules. Therefore, we present PriorityDistill, a semi-automated approach for distilling priority following signals from LLM simulations to ensure robust rule integration and adherence. Our experiments show that this method not only effectively minimizes misalignments utilizing only one general rule but also adapts smoothly to various unseen rules, ensuring they are shielded from hijacking and that the model responds appropriately.
Key facts. Cited by 18 papers in the map (data through 7 Oct 2026). Placed in LLM preference optimization methods, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 33 of its 53 references that are in the map. First posted on arXiv 27 Feb 2024.
Builds on
33 of 53 references.
Closest ancestors · 5
Same direction, newest first
- 2023Large Language Model Alignment: A Survey26 Sep
- 2023Principle-Driven Self-Alignment of Language Models from Scratch with Minimal Human Supervision4 May
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructions20 Dec
- 2022Training language models to follow instructions with human feedback4 Mar
- 2021A General Language Assistant as a Laboratory for Alignment1 Dec
Other references · 28
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2020Learning to summarize from human feedbackcited by 2,562
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 743
- 2023Can Large Language Models Be an Alternative to Human Evaluations?cited by 729
16 more
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 527
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 514
- 2023Reinforced Self-Training (ReST) for Language Modelingcited by 486
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2023Making Retrieval-Augmented Language Models Robust to Irrelevant Contextcited by 364
- 2023Beyond Human Data: Scaling Self-Training for Problem-Solving with Language Modelscited by 325
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 250
- 2023Exploring Large Language Models for Communication Games: An Empirical Study on Werewolfcited by 238
- 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 202
- 2022Fine-tuning language models to find agreement among humans with diverse preferencescited by 189
- 2023Tensor Trust: Interpretable Prompt Injection Attacks from an Online Gamecited by 135
- 2023Can LLMs Follow Simple Rules?cited by 45
- 2023Everyone Deserves A Reward: Learning Customized Human Preferencescited by 42
- 2023Failures Pave the Way: Enhancing Large Language Models through Tuning-free Rule Accumulationcited by 30
Built on by
Citing papers per year: 2024: 8; 2025: 8; 2026: 2.
18 papers.
Sort:
By area:
- 2024A Survey on Self-Evolution of Large Language Modelscited by 86
- 2024LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shiftscited by 80
- 2024Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Trainingcited by 67
- 2024Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractionscited by 55
- 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchycited by 48
- 2025A Closer Look at System Prompt Robustnesscited by 31
- 2024SysBench: Can Large Language Models Follow System Messages?cited by 26
- 2025X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usabilitycited by 20
- 2024CantTalkAboutThis: Aligning Language Models to Stay on Topic in Dialoguescited by 15
- 2025LED-Merging: Mitigating Safety-Utility Conflicts in Model Merging with Location-Election-Disjointcited by 7
- 2024Baichuan Alignment Technical Reportcited by 6
- 2025LifeAlign: Lifelong Alignment for Large Language Models with Memory-Augmented Focalized Preference Optimizationcited by 6
6 more
- 2024RuleAlign: Making Large Language Models Better Physicians with Diagnostic Rule Alignmentcited by 3
- 2025Rule-Guided Feedback: Enhancing Reasoning by Enforcing Rule Adherence in Large Language Modelscited by 3
- 2025Learning to Route: A Rule-Driven Agent Framework for Hybrid-Source Retrieval-Augmented Generationcited by 3
- 2026Structuring the Space of Sociotechnical Alignmentcited by 2
- 2025System Message Generation for User Preferences using Open-Source Modelscited by 1
- 2026Compliance, Capability, and Conflict: Benchmarking Multimodal LLMs under System Messagescited by 0
- 2026Compliance, Capability, and Conflict: Benchmarking Multimodal LLMs under System Messages12 Jun 2026
- 2026Structuring the Space of Sociotechnical Alignment2 Jun 2026
- 2025Learning to Route: A Rule-Driven Agent Framework for Hybrid-Source Retrieval-Augmented Generation30 Sep 2025
- 2025LifeAlign: Lifelong Alignment for Large Language Models with Memory-Augmented Focalized Preference Optimization21 Sep 2025
- 2025Rule-Guided Feedback: Enhancing Reasoning by Enforcing Rule Adherence in Large Language Models14 Mar 2025
- 2025LED-Merging: Mitigating Safety-Utility Conflicts in Model Merging with Location-Election-Disjoint24 Feb 2025
- 2025System Message Generation for User Preferences using Open-Source Models17 Feb 2025
- 2025A Closer Look at System Prompt Robustness15 Feb 2025
- 2025X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability14 Feb 2025
- 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchy12 Feb 2025
- 2024Baichuan Alignment Technical Report19 Oct 2024
- 2024LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts14 Oct 2024
6 more
- 2024RuleAlign: Making Large Language Models Better Physicians with Diagnostic Rule Alignment22 Aug 2024
- 2024SysBench: Can Large Language Models Follow System Messages?20 Aug 2024
- 2024Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions5 Aug 2024
- 2024Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training12 Jul 2024
- 2024A Survey on Self-Evolution of Large Language Models22 Apr 2024
- 2024CantTalkAboutThis: Aligning Language Models to Stay on Topic in Dialogues4 Apr 2024
- 2025X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usabilitycited by 20
- 2024Baichuan Alignment Technical Reportcited by 6
- 2025LifeAlign: Lifelong Alignment for Large Language Models with Memory-Augmented Focalized Preference Optimizationcited by 6
- 2024RuleAlign: Making Large Language Models Better Physicians with Diagnostic Rule Alignmentcited by 3
- 2025LifeAlign: Lifelong Alignment for Large Language Models with Memory-Augmented Focalized Preference Optimization21 Sep 2025
- 2025X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability14 Feb 2025
- 2024Baichuan Alignment Technical Report19 Oct 2024
- 2024RuleAlign: Making Large Language Models Better Physicians with Diagnostic Rule Alignment22 Aug 2024
- 2025A Closer Look at System Prompt Robustnesscited by 31
- 2025A Closer Look at System Prompt Robustness15 Feb 2025
- 2024A Survey on Self-Evolution of Large Language Modelscited by 86
- 2024LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shiftscited by 80
- 2024Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Trainingcited by 67
- 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchycited by 48
- 2024SysBench: Can Large Language Models Follow System Messages?cited by 26
- 2025LED-Merging: Mitigating Safety-Utility Conflicts in Model Merging with Location-Election-Disjointcited by 7
- 2026Structuring the Space of Sociotechnical Alignmentcited by 2
- 2025System Message Generation for User Preferences using Open-Source Modelscited by 1
- 2026Structuring the Space of Sociotechnical Alignment2 Jun 2026
- 2025LED-Merging: Mitigating Safety-Utility Conflicts in Model Merging with Location-Election-Disjoint24 Feb 2025
- 2025System Message Generation for User Preferences using Open-Source Models17 Feb 2025
- 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchy12 Feb 2025
- 2024LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts14 Oct 2024
- 2024SysBench: Can Large Language Models Follow System Messages?20 Aug 2024
- 2024Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training12 Jul 2024
- 2024A Survey on Self-Evolution of Large Language Models22 Apr 2024
Similar, not cited
Close in wording, no citation either way
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges
- 2025P-Aligner: Enabling Pre-Alignment of Language Models via Principled Instruction Synthesis
- 2025Align-Pro: A Principled Approach to Prompt Optimization for LLM Alignment
- 2024MetaAlign: Align Large Language Models with Diverse Preferences during Inference Time
- 2023CycleAlign: Iterative Distillation from Black-box LLM to White-box Models for Better Human Alignment
- 2026ECLIPTICA -- A Framework for Switchable LLM Alignment via CITA - Contrastive Instruction-Tuned Alignment
- 2026SpecAlign: Efficient Specification-Grounded Alignment of Large Language Models via Synthetic Data
- 2025A Survey on Personalized Alignment -- The Missing Piece for Large Language Models in Real-World Applications