SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior
Not on the map. Why?
Abstract (arXiv)
The ideal AI safety moderation system would be both structurally interpretable (so its decisions can be reliably explained) and steerable (to align to safety standards and reflect a community's values), which current systems fall short on. To address this gap, we present SafetyAnalyst, a novel AI safety moderation framework. Given an AI behavior, SafetyAnalyst uses chain-of-thought reasoning to analyze its potential consequences by creating a structured "harm-benefit tree," which enumerates harmful and beneficial actions and effects the AI behavior may lead to, along with likelihood, severity, and immediacy labels that describe potential impacts on stakeholders. SafetyAnalyst then aggregates all effects into a harmfulness score using 28 fully interpretable weight parameters, which can be aligned to particular safety preferences. We applied this framework to develop an open-source LLM prompt safety classification system, distilled from 18.5 million harm-benefit features generated by frontier LLMs on 19k prompts. On comprehensive benchmarks, we show that SafetyAnalyst (average F1=0.81) outperforms existing moderation systems (average F1<0.72) on prompt safety classification, while offering the additional advantages of interpretability, transparency, and steerability.
Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Builds on 41 of its 72 references that are in the map. First posted on arXiv 22 Oct 2024.
Builds on
41 of 72 references.
References · 41
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,767
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2014FitNets: Hints for Thin Deep Netscited by 1,619
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2016Paying More Attention to Attention: Improving the Performance of Convolutional Neural Networks via Attention Transfercited by 1,059
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 828
29 more
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2021Symbolic Knowledge Distillation: from General Language Models to Commonsense Modelscited by 270
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 224
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 224
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 224
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 176
- 2024A Roadmap to Pluralistic Alignmentcited by 175
- 2024The Landscape of Emerging AI Agent Architectures for Reasoning, Planning, and Tool Calling: A Surveycited by 164
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
- 2023Distributional Preference Learning: Understanding and Accounting for Hidden Context in RLHFcited by 125
- 2024Modular Pluralism: Pluralistic Alignment via Multi-LLM Collaborationcited by 111
- 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 100
- 2023Value Kaleidoscope: Engaging AI with Pluralistic Human Values, Rights, and Dutiescited by 97
- 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teamingcited by 96
- 2024Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systemscited by 94
- 2023DICES Dataset: Diversity in Conversational AI Evaluation for Safetycited by 86
- 2023SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Modelscited by 72
- 2024AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policiescited by 69
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 60
- 2024Against The Achilles' Heel: A Survey on Red Teaming for Generative Modelscited by 55
- 2024PAL: Pluralistic Alignment Framework for Learning from Heterogeneous Preferencescited by 53
- 2024AI Risk Categorization Decoded (AIR 2024): From Government Regulations to Corporate Policiescited by 34
- 2024Towards a Privacy and Security-Aware Framework for Ethical AI: Guiding the Development and Assessment of AI Systemscited by 4
- 2023The Chai Platform's AI Safety Frameworkcited by 1
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
Built on by
Citing papers per year: 2025: 6; 2026: 4.
10 papers.
- 2025Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safetycited by 38
- 2025STAC: When Innocent Tools Form Dangerous Chains for LLM Agentscited by 5
- 2026PluriHarms: Benchmarking the Full Spectrum of Human Judgments on AI Harmcited by 5
- 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrailscited by 4
- 2025EVALUESTEER: Measuring Reward Model Steerability Towards Values and Preferencescited by 3
- 2025DialogGuard: Multi-Agent Psychosocial Safety Evaluation of Sensitive LLM Responsescited by 3
- 2025CoPE: A Small Language Model for Steerable and Scalable Content Labelingcited by 3
- 2025Mapping Faithful Reasoning in Language Modelscited by 2
- 2026NeuroArmor: Safe-Variant-Guided Representation Consistency for Selective Re-Anchoring in Jailbreak Defensecited by 0
- 2026Multi-Dimensional Comparative Scale Construction for Efficient Personalized Subjective Judgment in High-Traffic Applicationscited by 0
- 2026Multi-Dimensional Comparative Scale Construction for Efficient Personalized Subjective Judgment in High-Traffic Applications27 Sep 2026
- 2026NeuroArmor: Safe-Variant-Guided Representation Consistency for Selective Re-Anchoring in Jailbreak Defense2 Jun 2026
- 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrails17 May 2026
- 2026PluriHarms: Benchmarking the Full Spectrum of Human Judgments on AI Harm13 Jan 2026
- 2025CoPE: A Small Language Model for Steerable and Scalable Content Labeling19 Dec 2025
- 2025DialogGuard: Multi-Agent Psychosocial Safety Evaluation of Sensitive LLM Responses1 Dec 2025
- 2025Mapping Faithful Reasoning in Language Models25 Oct 2025
- 2025EVALUESTEER: Measuring Reward Model Steerability Towards Values and Preferences7 Oct 2025
- 2025STAC: When Innocent Tools Form Dangerous Chains for LLM Agents30 Sep 2025
- 2025Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety6 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2025Annotating the Chain-of-Thought: A Behavior-Labeled Dataset for AI Safety
- 2026Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents
- 2025Aetheria: A multimodal interpretable content safety framework based on multi-agent debate and collaboration
- 2026HarmThoughts: A Benchmark for Fine-Grained Harmful Behavior Detection in Reasoning Traces
- 2025A Different Approach to AI Safety: Proceedings from the Columbia Convening on Openness in Artificial Intelligence and AI Safety
- 2026Do LLMs Follow Their Own Rules? A Reflexive Audit of Self-Stated Safety Policies
- 2025A Concrete Roadmap towards Safety Cases based on Chain-of-Thought Monitoring
- 2026DRAFT: Task Decoupled Latent Reasoning for Agent Safety