Honesty to Subterfuge: In-Context Reinforcement Learning Can Make Honest Models Reward Hack
On the map: LLM alignment / RLHF / preference optimisation → Reward hacking and misspecification
Abstract (arXiv)
Previous work has shown that training "helpful-only" LLMs with reinforcement learning on a curriculum of gameable environments can lead models to generalize to egregious specification gaming, such as editing their own reward function or modifying task checklists to appear more successful. We show that gpt-4o, gpt-4o-mini, o1-preview, and o1-mini - frontier models trained to be helpful, harmless, and honest - can engage in specification gaming without training on a curriculum of tasks, purely from in-context iterative reflection (which we call in-context reinforcement learning, "ICRL"). We also show that using ICRL to generate highly-rewarded outputs for expert iteration (compared to the standard expert iteration reinforcement learning algorithm) may increase gpt-4o-mini's propensity to learn specification-gaming policies, generalizing (in very rare cases) to the most egregious strategy where gpt-4o-mini edits its own reward function. Our results point toward the strong ability of in-context reflection to discover rare specification-gaming strategies that models might not exhibit zero-shot or with normal training, highlighting the need for caution when relying on alignment of LLMs in zero-shot settings.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Reward hacking and misspecification, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 18 of its 26 references that are in the map. First posted on arXiv 9 Oct 2024.
Builds on
18 of 26 references.
Closest ancestors · 2
Same direction, newest first
- 2024Spontaneous Reward Hacking in Iterative Self-Refinement5 Jul
- 2022The Effects of Reward Misspecification: Mapping and Mitigating Misaligned Models10 Jan
Other references · 16
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,064
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,317
- 2023Principle-Driven Self-Alignment of Language Models from Scratch with Minimal Human Supervisioncited by 318
- 2023The Unlocking Spell on Base LLMs: Rethinking Alignment via In-Context Learningcited by 251
- 2022Can language models learn from explanations in context?cited by 248
- 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 158
- 2023Training Language Models with Language Feedback at Scalecited by 125
- 2023ISR-LLM: Iterative Self-Refined Large Language Model for Long-Horizon Sequential Task Planningcited by 77
- 2024LLM2LLM: Boosting LLMs with Novel Iterative Data Enhancementcited by 69
- 2023Investigating the Effectiveness of Task-Agnostic Prefix Prompt for Instruction Followingcited by 33
- 2024Generative AI for Synthetic Data Generation: Methods, Challenges and the Futurecited by 31
4 more
- 2023Reflection-Tuning: Data Recycling Improves LLM Instruction-Tuningcited by 26
- 2022Using Interactive Feedback to Improve the Accuracy and Explainability of Question Answering Systems Post-Deploymentcited by 25
- 2024MetaReflection: Learning Instructions for Language Agents using Past Reflectionscited by 19
- 2024Self-Judge: Selective Instruction Following with Alignment Self-Evaluationcited by 7
Built on by
Citing papers per year: 2025: 5; 2026: 3.
8 papers.
- 2025A Comprehensive Survey of Reward Models: Taxonomy, Applications, Challenges, and Futurecited by 53
- 2025Writing-Zero: Bridge the Gap Between Non-verifiable Tasks and Verifiable Rewardscited by 47
- 2026Open Rubric System: Scaling Reinforcement Learning with Pairwise Adaptive Rubriccited by 26
- 2026Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundariescited by 12
- 2025ScholarEval: Research Idea Evaluation Grounded in Literaturecited by 10
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blindcited by 7
- 2025Specification Self-Correction: Mitigating In-Context Reward Hacking Through Test-Time Refinementcited by 6
- 2026Bridging Online and Offline RL: Contextual Bandit Learning for Multi-Turn Code Generationcited by 4
- 2026Open Rubric System: Scaling Reinforcement Learning with Pairwise Adaptive Rubric15 Feb 2026
- 2026Bridging Online and Offline RL: Contextual Bandit Learning for Multi-Turn Code Generation3 Feb 2026
- 2026Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundaries8 Jan 2026
- 2025ScholarEval: Research Idea Evaluation Grounded in Literature17 Oct 2025
- 2025The Secret Agenda: LLMs Strategically Lie and Our Current Safety Tools Are Blind23 Sep 2025
- 2025Specification Self-Correction: Mitigating In-Context Reward Hacking Through Test-Time Refinement24 Jul 2025
- 2025Writing-Zero: Bridge the Gap Between Non-verifiable Tasks and Verifiable Rewards30 May 2025
- 2025A Comprehensive Survey of Reward Models: Taxonomy, Applications, Challenges, and Future12 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2026In-Context Reinforcement Learning under Non-Stationarity: A Survey
- 2026Generalization Hacking: Models Can Game Reinforcement Learning by Preventing Behavioral Generalization
- 2026Towards Understanding Specification Gaming in Reasoning Models
- 2025Reward Is Enough: LLMs Are In-Context Reinforcement Learners
- 2026Reward Hacking in Language Model Agents: Revisiting AI Safety Gridworlds
- 2026Learning in Context, Guided by Choice: A Reward-Free Paradigm for Reinforcement Learning with Transformers
- 2026LLMs Gaming Verifiers: RLVR can Lead to Reward Hacking
- 2026CAST: Game Solvers as Turn-Level Teachers for LLM Agents