Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
Abstract (arXiv)
Balancing helpfulness and safety (harmlessness) is a critical challenge in aligning large language models (LLMs). Current approaches often decouple these two objectives, training separate preference models for helpfulness and safety, while framing safety as a constraint within a constrained Markov Decision Process (CMDP) framework. This paper identifies a potential issue when using the widely adopted expected safety constraints for LLM safety alignment, termed "safety compensation", where the constraints are satisfied on expectation, but individual prompts may trade off safety, resulting in some responses being overly restrictive while others remain unsafe. To address this issue, we propose Rectified Policy Optimization (RePO), which replaces the expected safety constraint with critical safety constraints imposed on every prompt. At the core of RePO is a policy update mechanism driven by rectified policy gradients, which penalizes the strict safety violation of every prompt, thereby enhancing safety across nearly all prompts. Our experiments demonstrate that RePO outperforms strong baseline methods and significantly enhances LLM safety alignment.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 57 of its 80 references that are in the map. First posted on arXiv 25 Oct 2024.
Builds on
57 of 80 references.
Closest ancestors · 4
Same direction, newest first
- 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization29 May
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned23 Aug
Other references · 53
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2015Trust Region Policy Optimizationcited by 2,503
38 more
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2015High-Dimensional Continuous Control Using Generalized Advantage Estimationcited by 1,916
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,056
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2022PAL: Program-aided Language Modelscited by 635
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2022LM-Nav: Robotic Navigation with Large Pre-Trained Models of Language, Vision, and Actioncited by 435
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2023Detecting Language Model Attacks with Perplexitycited by 411
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
- 2023GPTScore: Evaluate as You Desirecited by 357
- 2024Is DPO Superior to PPO for LLM Alignment? A Comprehensive Studycited by 262
- 2023AI Alignment: A Comprehensive Surveycited by 256
- 2023Prompting Large Language Model for Machine Translation: A Case Studycited by 247
- 2022GatorTron: A Large Clinical Language Model to Unlock Patient Information from Unstructured Electronic Health Recordscited by 238
- 2024HelpSteer2: Open-source dataset for training top-performing reward modelscited by 232
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
- 2020Projection-Based Constrained Policy Optimizationcited by 195
- 2022On Second Thought, Let's Not Think Step by Step! Bias and Toxicity in Zero-Shot Reasoningcited by 191
- 2023RAIN: Your Language Models Can Align Themselves without Finetuningcited by 149
- 2019Constrained Reinforcement Learning Has Zero Duality Gapcited by 144
- 2020CRPO: A New Approach for Safe Reinforcement Learning with Convergence Guaranteecited by 128
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
- 2022On the Convergence Rates of Policy Gradient Methodscited by 115
- 2023Motion Planning for Autonomous Driving: The State of the Art and Future Perspectivescited by 112
- 2023Confronting Reward Model Overoptimization with Constrained RLHFcited by 96
- 2024Panacea: Pareto Alignment via Preference Adaptation for LLMscited by 78
- 2022Enforcing Hard Constraints with Soft Barriers: Safe Reinforcement Learning in Unknown Stochastic Environmentscited by 54
- 2021Learning to run a Power Network Challenge: a Retrospective Analysiscited by 52
- 2024A Survey of Constraint Formulations in Safe Reinforcement Learningcited by 42
- 2022SafeText: A Benchmark for Exploring Physical Safety in Language Modelscited by 41
- 2023Ethicist: Targeted Training Data Extraction Through Loss Smoothed Soft Prompting and Calibrated Confidence Estimationcited by 36
- 2023Policy Optimization in RLHF: The Impact of Out-of-preference Datacited by 35
- 2024Stepwise Alignment for Constrained Language Model Policy Optimizationcited by 30
- 2021Safe Reinforcement Learning using Formal Verification for Tissue Retraction in Autonomous Robotic-Assisted Surgerycited by 22
- 2024SPO: Multi-Dimensional Preference Sequential Alignment With Implicit Reward Modelingcited by 21
50 most cited of 53 All 53 (JSON)
Built on by
Citing papers per year: 2025: 4; 2026: 1.
5 papers.
- 2025Learning Safety Constraints for Large Language Modelscited by 13
- 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimizationcited by 11
- 2025Alignment of large language models with constrained learningcited by 8
- 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraintscited by 4
- 2026HIPO: Instruction Hierarchy via Constrained Reinforcement Learningcited by 2
- 2026HIPO: Instruction Hierarchy via Constrained Reinforcement Learning17 Mar 2026
- 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization12 Dec 2025
- 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraints9 Jun 2025
- 2025Learning Safety Constraints for Large Language Models30 May 2025
- 2025Alignment of large language models with constrained learning26 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety
- 2026BSO: Safety Alignment Is Density Ratio Matching
- 2026Improving Safety Alignment via Balanced Direct Preference Optimization
- 2025Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling
- 2025Equilibrate RLHF: Towards Balancing Helpfulness-Safety Trade-off in Large Language Models
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
- 2025Breaking the Safety-Capability Tradeoff: Reinforcement Learning with Verifiable Rewards Maintains Safety Guardrails in LLMs
- 2026Oyster-II: Reinforcement Learning for Constructive Safety Alignment in Large Language Models