Legend: Leveraging Representation Engineering to Annotate Safety Margin for Preference Datasets
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
Abstract (arXiv)
The success of the reward model in distinguishing between responses with subtle safety differences depends critically on the high-quality preference dataset, which should capture the fine-grained nuances of harmful and harmless responses. This motivates the need to develop a dataset involving preference margins, which accurately quantify how harmless one response is compared to another. In this paper, we take the first step to propose an effective and cost-efficient framework to promote the margin-enhanced preference dataset development. Our framework, Legend, Leverages representation engineering to annotate preference datasets. It constructs the specific direction within the LLM's embedding space that represents safety. By leveraging this safety direction, Legend can then leverage the semantic distances of paired responses along this direction to annotate margins automatically. We experimentally demonstrate our effectiveness in both reward modeling and harmless alignment for LLMs. Legend also stands out for its efficiency, requiring only the inference time rather than additional training. This efficiency allows for easier implementation and scalability, making Legend particularly valuable for practical applications in aligning LLMs with safe conversations.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 39 of its 42 references that are in the map. First posted on arXiv 12 Jun 2024.
Builds on
39 of 42 references.
Closest ancestors · 4
Same direction, newest first
- 2024InferAligner: Inference-Time Alignment for Harmlessness through Cross-Model Guidance20 Jan
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul
Other references · 35
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2023Qwen Technical Reportcited by 3,273
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2020Learning to summarize from human feedbackcited by 2,562
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,734
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
23 more
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,056
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 951
- 2022Toy Models of Superpositioncited by 928
- 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 865
- 2023Steering Language Models With Activation Engineeringcited by 824
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 733
- 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 679
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
- 2024The Platonic Representation Hypothesiscited by 362
- 2023Language Models Represent Space and Timecited by 306
- 2023Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewardscited by 232
- 2023Reward Model Ensembles Help Mitigate Overoptimizationcited by 225
- 2019Visualizing and Measuring the Geometry of BERTcited by 215
- 2024Secrets of RLHF in Large Language Models Part II: Reward Modelingcited by 170
- 2023Inspecting and Editing Knowledge Representations in Language Modelscited by 140
- 2024Theoretical guarantees on the best-of-n alignment policycited by 116
- 2024Transforming and Combining Rewards for Aligning Large Language Modelscited by 24
- 2024The First to Know: How Token Distributions Reveal Hidden Knowledge in Large Vision-Language Models?cited by 24
- 2024Towards Tracing Trustworthiness Dynamics: Revisiting Pre-training Period of Large Language Modelscited by 18
- 2024Hummer: Towards Limited Competitive Preference Datasetcited by 10
- 2024Towards Understanding the Influence of Reward Margin on Preference Model Performancecited by 9
Built on by
Citing papers per year: 2025: 5.
5 papers.
- 2025Representation Engineering for Large-Language Models: Survey and Research Challengescited by 18
- 2025On Almost Surely Safe Alignment of Large Language Models at Inference-Timecited by 13
- 2025Can Large Language Models Understand Internet Buzzwords Through User-Generated Contentcited by 2
- 2025Act-Adaptive Margin: Dynamically Calibrating Reward Models for Subjective Ambiguitycited by 2
- 2025Icon2: Aligning Large Language Models Using Self-Synthetic Preference Data via Inherent Regulationcited by 0
- 2025Icon2: Aligning Large Language Models Using Self-Synthetic Preference Data via Inherent Regulation6 Sep 2025
- 2025Act-Adaptive Margin: Dynamically Calibrating Reward Models for Subjective Ambiguity29 May 2025
- 2025Can Large Language Models Understand Internet Buzzwords Through User-Generated Content21 May 2025
- 2025Representation Engineering for Large-Language Models: Survey and Research Challenges24 Feb 2025
- 2025On Almost Surely Safe Alignment of Large Language Models at Inference-Time3 Feb 2025
Similar, not cited
Close in wording, no citation either way
- 2024Diverging Preferences: When do Annotators Disagree and do Models Know?
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preference
- 2024Dr. SoW: Density Ratio of Strong-over-weak LLMs for Reducing the Cost of Human Annotation in Preference Tuning
- 2025Larger or Smaller Reward Margins to Select Preferences for Alignment?
- 2024Spread Preference Annotation: Direct Preference Judgment for Efficient LLM Alignment
- 2026Cat-DPO: Category-Adaptive Safety Alignment
- 2024RewardBench: Evaluating Reward Models for Language Modeling
- 2025Data-adaptive Safety Rules for Training Reward Models