MONA: Myopic Optimization with Non-myopic Approval Can Mitigate Multi-step Reward Hacking
On the map: LLM alignment / RLHF / preference optimisation → Reward hacking and misspecification
Abstract (arXiv)
Future advanced AI systems may learn sophisticated strategies through reinforcement learning (RL) that humans cannot understand well enough to safely evaluate. We propose a training method which avoids agents learning undesired multi-step plans that receive high reward (multi-step "reward hacks") even if humans are not able to detect that the behaviour is undesired. The method, Myopic Optimization with Non-myopic Approval (MONA), works by combining short-sighted optimization with far-sighted reward. We demonstrate that MONA can prevent multi-step reward hacking that ordinary RL causes, even without being able to detect the reward hacking and without any extra information that ordinary RL does not get access to. We study MONA empirically in three settings which model different misalignment failure modes including 2-step environments with LLMs representing delegated oversight and encoded reasoning and longer-horizon gridworld environments representing sensor tampering.
Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). Placed in Reward hacking and misspecification, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 36 of its 80 references that are in the map. First posted on arXiv 22 Jan 2025.
Builds on
36 of 80 references.
References · 36
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2023Let's Verify Step by Stepcited by 3,598
- 2021Program Synthesis with Large Language Modelscited by 3,509
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2016Concrete Problems in AI Safetycited by 1,582
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2023Math-Shepherd: Verify and Reinforce LLMs Step-by-step without Human Annotationscited by 895
- 2022Solving math word problems with process- and outcome-based feedbackcited by 871
- 2023A Watermark for Large Language Modelscited by 667
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
24 more
- 2023AI Control: Improving Safety Despite Intentional Subversioncited by 207
- 2024AlphaMath Almost Zero: Process Supervision without Processcited by 160
- 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 158
- 2017Interactive Learning from Policy-Dependent Human Feedbackcited by 155
- 2024Language Models Learn to Mislead Humans via RLHFcited by 118
- 2019Reward Tampering Problems and Solutions in Reinforcement Learning: A Causal Influence Diagram Perspectivecited by 107
- 2024GLoRe: When, Where, and How to Improve LLM Reasoning via Global and Local Refinementscited by 101
- 2017Reinforcement Learning with a Corrupted Reward Channelcited by 68
- 2024Multi-turn Reinforcement Learning from Preference Human Feedbackcited by 65
- 2023Preventing Language Models From Hiding Their Reasoningcited by 62
- 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMscited by 52
- 2021Agent Incentives: A Causal Perspectivecited by 51
- 2020Neurosymbolic Reinforcement Learning with Formally Verified Explorationcited by 49
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 45
- 2021Heuristic-Guided Reinforcement Learningcited by 41
- 2022Estimating and Penalizing Induced Preference Shifts in Recommender Systemscited by 29
- 2022Controlling Commercial Cooling Systems Using Reinforcement Learningcited by 25
- 2015Early Stopping is Nonparametric Variational Inferencecited by 23
- 2021User Tampering in Reinforcement Learning Recommender Systemscited by 23
- 2022Path-Specific Objectives for Safer Agent Incentivescited by 20
- 2023Learning Optimal Advantage from Preferences and Mistaking it for Rewardcited by 18
- 2016Avoiding Wireheading with Value Reinforcement Learningcited by 15
- 2025RLHS: Mitigating Misalignment in RLHF with Hindsight Simulationcited by 15
- 2020Avoiding Tampering Incentives in Deep RL via Decoupled Approvalcited by 12
Built on by
Citing papers per year: 2025: 9; 2026: 10.
19 papers.
Sort:
By area:
- 2025When Chain of Thought is Necessary, Language Models Struggle to Evade Monitorscited by 81
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challengescited by 30
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agentscited by 28
- 2025Teaching Models to Verbalize Reward Hacking in Chain-of-Thought Reasoningcited by 19
- 2025Can Reasoning Models Obfuscate Reasoning? Stress-Testing Chain-of-Thought Monitorabilitycited by 18
- 2025General agents contain world modelscited by 14
- 2025Environment Scaling for Interactive Agentic Experience Collection: A Surveycited by 13
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 11
- 2026Analyzing and Improving Chain-of-Thought Monitorability Through Information Theorycited by 7
- 2026Quantifying the Necessity of Chain of Thought through Opaque Serial Depthcited by 7
- 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoringcited by 6
- 2026From Plan to Action: How Well Do Agents Follow the Plan?cited by 4
7 more
- 2026Towards Understanding Specification Gaming in Reasoning Modelscited by 3
- 2026Likelihood Hacking in Probabilistic Program Synthesiscited by 2
- 2025Higher-Order Belief in Incomplete Information MAIDscited by 1
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectivescited by 1
- 2025Corrigibility Transformation: Constructing Goals That Accept Updatescited by 0
- 2026NEST: Nascent Encoded Steganographic Thoughtscited by 0
- 2026Extending MONA in Camera Dropbox: Reproduction, Learned Approval, and Design Implications for Reward-Hacking Mitigationcited by 0
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectives24 Jul 2026
- 2026Towards Understanding Specification Gaming in Reasoning Models4 May 2026
- 2026Reward Hacking in the Era of Large Models: Mechanisms, Emergent Misalignment, Challenges15 Apr 2026
- 2026From Plan to Action: How Well Do Agents Follow the Plan?13 Apr 2026
- 2026Extending MONA in Camera Dropbox: Reproduction, Learned Approval, and Design Implications for Reward-Hacking Mitigation31 Mar 2026
- 2026Likelihood Hacking in Probabilistic Program Synthesis25 Mar 2026
- 2026Quantifying the Necessity of Chain of Thought through Opaque Serial Depth10 Mar 2026
- 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring26 Feb 2026
- 2026Analyzing and Improving Chain-of-Thought Monitorability Through Information Theory20 Feb 2026
- 2026NEST: Nascent Encoded Steganographic Thoughts15 Feb 2026
- 2025Difficulties with Evaluating a Deception Detector for AIs27 Nov 2025
- 2025Environment Scaling for Interactive Agentic Experience Collection: A Survey12 Nov 2025
7 more
- 2025Can Reasoning Models Obfuscate Reasoning? Stress-Testing Chain-of-Thought Monitorability21 Oct 2025
- 2025Corrigibility Transformation: Constructing Goals That Accept Updates17 Oct 2025
- 2025When Chain of Thought is Necessary, Language Models Struggle to Evade Monitors7 Jul 2025
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents30 Jun 2025
- 2025Teaching Models to Verbalize Reward Hacking in Chain-of-Thought Reasoning28 Jun 2025
- 2025General agents contain world models2 Jun 2025
- 2025Higher-Order Belief in Incomplete Information MAIDs8 Mar 2025
- 2025When Chain of Thought is Necessary, Language Models Struggle to Evade Monitorscited by 81
- 2025Teaching Models to Verbalize Reward Hacking in Chain-of-Thought Reasoningcited by 19
- 2025Can Reasoning Models Obfuscate Reasoning? Stress-Testing Chain-of-Thought Monitorabilitycited by 18
- 2026Analyzing and Improving Chain-of-Thought Monitorability Through Information Theorycited by 7
- 2026Quantifying the Necessity of Chain of Thought through Opaque Serial Depthcited by 7
- 2026Towards Understanding Specification Gaming in Reasoning Modelscited by 3
- 2026NEST: Nascent Encoded Steganographic Thoughtscited by 0
- 2026Towards Understanding Specification Gaming in Reasoning Models4 May 2026
- 2026Quantifying the Necessity of Chain of Thought through Opaque Serial Depth10 Mar 2026
- 2026Analyzing and Improving Chain-of-Thought Monitorability Through Information Theory20 Feb 2026
- 2026NEST: Nascent Encoded Steganographic Thoughts15 Feb 2026
- 2025Can Reasoning Models Obfuscate Reasoning? Stress-Testing Chain-of-Thought Monitorability21 Oct 2025
- 2025When Chain of Thought is Necessary, Language Models Struggle to Evade Monitors7 Jul 2025
- 2025Teaching Models to Verbalize Reward Hacking in Chain-of-Thought Reasoning28 Jun 2025
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agentscited by 28
- 2025Environment Scaling for Interactive Agentic Experience Collection: A Surveycited by 13
- 2026From Plan to Action: How Well Do Agents Follow the Plan?cited by 4
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectivescited by 1
- 2026Draining the Energy Commons: Self-Defeating Over-Appropriation as a Coordination Failure in Agentic LLM Collectives24 Jul 2026
- 2026From Plan to Action: How Well Do Agents Follow the Plan?13 Apr 2026
- 2025Environment Scaling for Interactive Agentic Experience Collection: A Survey12 Nov 2025
- 2025A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents30 Jun 2025
- 2025General agents contain world modelscited by 14
- 2025General agents contain world models2 Jun 2025
- 2025Difficulties with Evaluating a Deception Detector for AIscited by 11
- 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoringcited by 6
- 2026Likelihood Hacking in Probabilistic Program Synthesiscited by 2
- 2025Higher-Order Belief in Incomplete Information MAIDscited by 1
- 2025Corrigibility Transformation: Constructing Goals That Accept Updatescited by 0
- 2026Likelihood Hacking in Probabilistic Program Synthesis25 Mar 2026
- 2026A Decision-Theoretic Formalisation of Steganography With Applications to LLM Monitoring26 Feb 2026
- 2025Difficulties with Evaluating a Deception Detector for AIs27 Nov 2025
- 2025Corrigibility Transformation: Constructing Goals That Accept Updates17 Oct 2025
- 2025Higher-Order Belief in Incomplete Information MAIDs8 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2026Reward Hacking in Language Model Agents: Revisiting AI Safety Gridworlds
- 2026Countdown-Code: A Testbed for Studying The Emergence and Generalization of Reward Hacking in RLVR
- 2024Correlated Proxies: A New Definition and Improved Mitigation for Reward Hacking
- 2026Reward Hacking as Equilibrium under Finite Evaluation
- 2022Defining and Characterizing Reward Hacking
- 2026Reward Hacking Benchmark: Measuring Exploits in LLM Agents with Tool Use
- 2026From Rebound to Remedy: Understanding and Mitigating Reward Hacking via Representation Engineering
- 2025The Horcrux: Mechanistically Interpretable Task Decomposition for Detecting and Mitigating Reward Hacking in Embodied AI Systems