Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning
On the map: LLM reasoning → Reasoning for agents, planning and code
Abstract (arXiv)
While Large Language Models (LLMs) exhibit remarkable capabilities, they also introduce significant safety and privacy risks. Current mitigation strategies often fail to preserve contextual reasoning capabilities in risky scenarios. Instead, they rely heavily on sensitive pattern matching to protect LLMs, which limits the scope. Furthermore, they overlook established safety and privacy standards, leading to systemic risks for legal compliance. To address these gaps, we formulate safety and privacy issues into contextualized compliance problems following the Contextual Integrity (CI) theory. Under the CI framework, we align our model with three critical regulatory standards: GDPR, EU AI Act, and HIPAA. Specifically, we employ reinforcement learning (RL) with a rule-based reward to incentivize contextual reasoning capabilities while enhancing compliance with safety and privacy norms. Through extensive experiments, we demonstrate that our method not only significantly enhances legal compliance (achieving a +8.58% accuracy improvement in safety/privacy benchmarks) but also further improves general reasoning capability. For OpenThinker-7B, a strong reasoning model that significantly outperforms its base model Qwen2.5-7B-Instruct across diverse subjects, our method enhances its general reasoning capabilities, with +2.05% and +8.98% accuracy improvement on the MMLU and LegalBench benchmark, respectively.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 36 of its 43 references that are in the map. First posted on arXiv 20 May 2025.
Builds on
36 of 43 references.
References · 36
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2015Trust Region Policy Optimizationcited by 2,580
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2015High-Dimensional Continuous Control Using Generalized Advantage Estimationcited by 2,026
24 more
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2023Math-Shepherd: Verify and Reinforce LLMs Step-by-step without Human Annotationscited by 928
- 2021Membership Inference Attacks From First Principlescited by 878
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2023Prompt Injection attack against LLM-integrated Applicationscited by 605
- 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 333
- 2017Certified Defenses for Data Poisoning Attackscited by 303
- 2020Data Poisoning Attacks Against Federated Learning Systemscited by 275
- 2024Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Securitycited by 260
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
- 2024Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fastcited by 153
- 2020Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attackscited by 116
- 2024Efficient Adversarial Training in LLMs with Continuous Attackscited by 113
- 2023Reinforcement Learning with Human Feedback: Learning Dynamic Choices via Pessimismcited by 69
- 2025Can Indirect Prompt Injection Attacks Be Detected and Removed?cited by 52
- 2022Privately Fine-Tuning Large Language Models with Differential Privacycited by 39
- 2024GoldCoin: Grounding Large Language Models in Privacy Laws via Contextual Integrity Theorycited by 37
- 2024Operationalizing Contextual Integrity in Privacy-Conscious Assistantscited by 37
- 2024CI-Bench: Benchmarking Contextual Integrity of AI Assistants on Synthetic Datacited by 37
- 2024Privacy Checklist: Privacy Violation Detection Grounding on Contextual Integrity Theorycited by 18
- 2025Segmenting Text and Learning Their Rewards for Improved RLHF in Language Modelcited by 12
- 2024Alignment Studio: Aligning Large Language Models to Particular Contextual Regulationscited by 10
Built on by
Citing papers per year: 2025: 3; 2026: 5.
8 papers.
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Modelscited by 25
- 2025Safety Compliance: Rethinking LLM Safety Reasoning through the Lens of Compliancecited by 2
- 2026Do LLMs Know What Is Private Internally? Probing and Steering Contextual Privacy Norms in Large Language Model Representationscited by 2
- 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMscited by 1
- 2025HKGAI-V1: Towards Regional Sovereign Large Language Model for Hong Kongcited by 0
- 2026Reinforcing privacy reasoning in LLMs via normative simulacra from fictioncited by 0
- 2026Adversarial Reframing: A Framework for Targeted Generation in Language Modelscited by 0
- 2026MASCRDM: Multi-Agent System for Compliance Risk Detection and Mitigation in Training Process of Large Language Modelscited by 0
- 2026MASCRDM: Multi-Agent System for Compliance Risk Detection and Mitigation in Training Process of Large Language Models30 Sep 2026
- 2026Adversarial Reframing: A Framework for Targeted Generation in Language Models20 May 2026
- 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMs18 May 2026
- 2026Reinforcing privacy reasoning in LLMs via normative simulacra from fiction21 Apr 2026
- 2026Do LLMs Know What Is Private Internally? Probing and Steering Contextual Privacy Norms in Large Language Model Representations31 Mar 2026
- 2025Safety Compliance: Rethinking LLM Safety Reasoning through the Lens of Compliance26 Sep 2025
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models4 Sep 2025
- 2025HKGAI-V1: Towards Regional Sovereign Large Language Model for Hong Kong14 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2025Contextual Integrity in LLMs via Reasoning and Reinforcement Learning
- 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliance
- 20251-2-3 Check: Enhancing Contextual Privacy in LLM via Multi-Agent Reasoning
- 2026Safer Policy Compliance with Dynamic Epistemic Fallback
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
- 2025Position Paper: Rethinking Privacy in RL for Sequential Decision-making in the Age of LLMs
- 2026Contextualized Privacy Defense for LLM Agents
- 2026PrivAct: Internalizing Contextual Privacy Preservation via Multi-Agent Preference Training