mlsanityData to 7 Oct 2026

Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization

arXiv 2410.19933 ↗First posted 25 Oct 2024cs.LG cs.AI cs.CYcited by 5

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

Abstract (arXiv)

Balancing helpfulness and safety (harmlessness) is a critical challenge in aligning large language models (LLMs). Current approaches often decouple these two objectives, training separate preference models for helpfulness and safety, while framing safety as a constraint within a constrained Markov Decision Process (CMDP) framework. This paper identifies a potential issue when using the widely adopted expected safety constraints for LLM safety alignment, termed "safety compensation", where the constraints are satisfied on expectation, but individual prompts may trade off safety, resulting in some responses being overly restrictive while others remain unsafe. To address this issue, we propose Rectified Policy Optimization (RePO), which replaces the expected safety constraint with critical safety constraints imposed on every prompt. At the core of RePO is a policy update mechanism driven by rectified policy gradients, which penalizes the strict safety violation of every prompt, thereby enhancing safety across nearly all prompts. Our experiments demonstrate that RePO outperforms strong baseline methods and significantly enhances LLM safety alignment.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 57 of its 80 references that are in the map. First posted on arXiv 25 Oct 2024.

Builds on

57 of 80 references.

Closest ancestors · 4

Same direction, newest first

  1. 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization29 May
  2. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
  3. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul
  4. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned23 Aug

Other references · 53

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2022Training language models to follow instructions with human feedbackcited by 15,712
  3. 2017Proximal Policy Optimization Algorithmscited by 14,441
  4. 2024The Llama 3 Herd of Modelscited by 14,192
  5. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  6. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
  7. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  8. 2017Deep reinforcement learning from human preferencescited by 3,846
  9. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
  10. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
  11. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
  12. 2015Trust Region Policy Optimizationcited by 2,503
38 more
  1. 2020Extracting Training Data from Large Language Modelscited by 2,144
  2. 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
  3. 2015High-Dimensional Continuous Control Using Generalized Advantage Estimationcited by 1,916
  4. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
  5. 2022Scaling Laws for Reward Model Overoptimizationcited by 1,056
  6. 2021Ethical and social risks of harm from Language Modelscited by 957
  7. 2022PAL: Program-aided Language Modelscited by 635
  8. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
  9. 2022LM-Nav: Robotic Navigation with Large Pre-Trained Models of Language, Vision, and Actioncited by 435
  10. 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
  11. 2023Detecting Language Model Attacks with Perplexitycited by 411
  12. 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
  13. 2023GPTScore: Evaluate as You Desirecited by 357
  14. 2024Is DPO Superior to PPO for LLM Alignment? A Comprehensive Studycited by 262
  15. 2023AI Alignment: A Comprehensive Surveycited by 256
  16. 2023Prompting Large Language Model for Machine Translation: A Case Studycited by 247
  17. 2022GatorTron: A Large Clinical Language Model to Unlock Patient Information from Unstructured Electronic Health Recordscited by 238
  18. 2024HelpSteer2: Open-source dataset for training top-performing reward modelscited by 232
  19. 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
  20. 2020Projection-Based Constrained Policy Optimizationcited by 195
  21. 2022On Second Thought, Let's Not Think Step by Step! Bias and Toxicity in Zero-Shot Reasoningcited by 191
  22. 2023RAIN: Your Language Models Can Align Themselves without Finetuningcited by 149
  23. 2019Constrained Reinforcement Learning Has Zero Duality Gapcited by 144
  24. 2020CRPO: A New Approach for Safe Reinforcement Learning with Convergence Guaranteecited by 128
  25. 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
  26. 2022On the Convergence Rates of Policy Gradient Methodscited by 115
  27. 2023Motion Planning for Autonomous Driving: The State of the Art and Future Perspectivescited by 112
  28. 2023Confronting Reward Model Overoptimization with Constrained RLHFcited by 96
  29. 2024Panacea: Pareto Alignment via Preference Adaptation for LLMscited by 78
  30. 2022Enforcing Hard Constraints with Soft Barriers: Safe Reinforcement Learning in Unknown Stochastic Environmentscited by 54
  31. 2021Learning to run a Power Network Challenge: a Retrospective Analysiscited by 52
  32. 2024A Survey of Constraint Formulations in Safe Reinforcement Learningcited by 42
  33. 2022SafeText: A Benchmark for Exploring Physical Safety in Language Modelscited by 41
  34. 2023Ethicist: Targeted Training Data Extraction Through Loss Smoothed Soft Prompting and Calibrated Confidence Estimationcited by 36
  35. 2023Policy Optimization in RLHF: The Impact of Out-of-preference Datacited by 35
  36. 2024Stepwise Alignment for Constrained Language Model Policy Optimizationcited by 30
  37. 2021Safe Reinforcement Learning using Formal Verification for Tissue Retraction in Autonomous Robotic-Assisted Surgerycited by 22
  38. 2024SPO: Multi-Dimensional Preference Sequential Alignment With Implicit Reward Modelingcited by 21

50 most cited of 53 All 53 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 4; 2026: 1.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety
  2. 2026BSO: Safety Alignment Is Density Ratio Matching
  3. 2026Improving Safety Alignment via Balanced Direct Preference Optimization
  4. 2025Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling
  5. 2025Equilibrate RLHF: Towards Balancing Helpfulness-Safety Trade-off in Large Language Models
  6. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
  7. 2025Breaking the Safety-Capability Tradeoff: Reinforcement Learning with Verifiable Rewards Maintains Safety Guardrails in LLMs
  8. 2026Oyster-II: Reinforcement Learning for Constructive Safety Alignment in Large Language Models