mlsanityData to 7 Oct 2026

SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior

arXiv 2410.16665 ↗First posted 22 Oct 2024cs.CL cs.CYcited by 10

Not on the map. Why?

Abstract (arXiv)

The ideal AI safety moderation system would be both structurally interpretable (so its decisions can be reliably explained) and steerable (to align to safety standards and reflect a community's values), which current systems fall short on. To address this gap, we present SafetyAnalyst, a novel AI safety moderation framework. Given an AI behavior, SafetyAnalyst uses chain-of-thought reasoning to analyze its potential consequences by creating a structured "harm-benefit tree," which enumerates harmful and beneficial actions and effects the AI behavior may lead to, along with likelihood, severity, and immediacy labels that describe potential impacts on stakeholders. SafetyAnalyst then aggregates all effects into a harmfulness score using 28 fully interpretable weight parameters, which can be aligned to particular safety preferences. We applied this framework to develop an open-source LLM prompt safety classification system, distilled from 18.5 million harm-benefit features generated by frontier LLMs on 19k prompts. On comprehensive benchmarks, we show that SafetyAnalyst (average F1=0.81) outperforms existing moderation systems (average F1<0.72) on prompt safety classification, while offering the additional advantages of interpretability, transparency, and steerability.

Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Builds on 41 of its 72 references that are in the map. First posted on arXiv 22 Oct 2024.

Builds on

41 of 72 references.

References · 41

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2024The Llama 3 Herd of Modelscited by 14,192
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  4. 2015Distilling the Knowledge in a Neural Networkcited by 10,076
  5. 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,767
  6. 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
  7. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
  8. 2014FitNets: Hints for Thin Deep Netscited by 1,619
  9. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
  10. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  11. 2016Paying More Attention to Attention: Improving the Performance of Convolutional Neural Networks via Attention Transfercited by 1,059
  12. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 828
29 more
  1. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
  2. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
  3. 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
  4. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
  5. 2021Symbolic Knowledge Distillation: from General Language Models to Commonsense Modelscited by 270
  6. 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 224
  7. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 224
  8. 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 224
  9. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
  10. 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 176
  11. 2024A Roadmap to Pluralistic Alignmentcited by 175
  12. 2024The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Surveycited by 164
  13. 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
  14. 2023Distributional Preference Learning: Understanding and Accounting for Hidden Context in RLHFcited by 125
  15. 2024Modular Pluralism: Pluralistic Alignment via Multi-LLM Collaborationcited by 111
  16. 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 100
  17. 2023Value Kaleidoscope: Engaging AI with Pluralistic Human Values, Rights, and Dutiescited by 97
  18. 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teamingcited by 96
  19. 2024Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systemscited by 94
  20. 2023DICES Dataset: Diversity in Conversational AI Evaluation for Safetycited by 86
  21. 2023SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Modelscited by 72
  22. 2024AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policiescited by 69
  23. 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 60
  24. 2024Against The Achilles' Heel: A Survey on Red Teaming for Generative Modelscited by 55
  25. 2024PAL: Pluralistic Alignment Framework for Learning from Heterogeneous Preferencescited by 53
  26. 2024AI Risk Categorization Decoded (AIR 2024): From Government Regulations to Corporate Policiescited by 34
  27. 2024Towards a Privacy and Security-Aware Framework for Ethical AI: Guiding the Development and Assessment of AI Systemscited by 4
  28. 2023The Chai Platform's AI Safety Frameworkcited by 1
  29. 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 6; 2026: 4.

10 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Annotating the Chain-of-Thought: A Behavior-Labeled Dataset for AI Safety
  2. 2026Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents
  3. 2025Aetheria: A multimodal interpretable content safety framework based on multi-agent debate and collaboration
  4. 2026HarmThoughts: A Benchmark for Fine-Grained Harmful Behavior Detection in Reasoning Traces
  5. 2025A Different Approach to AI Safety: Proceedings from the Columbia Convening on Openness in Artificial Intelligence and AI Safety
  6. 2026Do LLMs Follow Their Own Rules? A Reflexive Audit of Self-Stated Safety Policies
  7. 2025A Concrete Roadmap towards Safety Cases based on Chain-of-Thought Monitoring
  8. 2026DRAFT: Task Decoupled Latent Reasoning for Agent Safety