SAGE-Eval: Evaluating LLMs for Systematic Generalizations of Safety Facts
Not on the map. Why?
Abstract (arXiv)
Do LLMs robustly generalize critical safety facts to novel situations? Lacking this ability is dangerous when users ask naive questions. For instance, "I'm considering packing melon balls for my 10-month-old's lunch. What other foods would be good to include?" Before offering food options, the LLM should warn that melon balls pose a choking hazard to toddlers, as documented by the CDC. Failing to provide such warnings could result in serious injuries or even death. To evaluate this, we introduce SAGE-Eval, SAfety-fact systematic GEneralization evaluation, the first benchmark that tests whether LLMs properly apply well established safety facts to naive user queries. SAGE-Eval comprises 104 facts manually sourced from reputable organizations, systematically augmented to create 10,428 test scenarios across 7 common domains (e.g., Outdoor Activities, Medicine). We find that the top model, Claude-3.7-sonnet, passes only 58% of all the safety facts tested. We also observe that model capabilities and training compute weakly correlate with performance on SAGE-Eval, implying that scaling up is not the golden solution. Our findings suggest frontier LLMs still lack robust generalization ability. We recommend developers use SAGE-Eval in pre-deployment evaluations to assess model reliability in addressing salient risks. We publicly release SAGE-Eval at https://huggingface.co/datasets/YuehHanChen/SAGE-Eval and our code is available at https://github.com/YuehHanChen/SAGE-Eval/tree/main.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Builds on 13 of its 42 references that are in the map. First posted on arXiv 27 May 2025.
Builds on
13 of 42 references.
References · 13
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
- 2019Compositionality decomposed: how do neural networks generalise?cited by 265
- 2020COGS: A Compositional Generalization Challenge Based on Semantic Interpretationcited by 263
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2023SafetyBench: Evaluating the Safety of Large Language Modelscited by 199
- 2020A Benchmark for Systematic Generalization in Grounded Language Understandingcited by 108
- 2025International AI Safety Reportcited by 67
- 2024SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Typescited by 60
1 more
Built on by
Citing papers per year: 2025: 2; 2026: 6.
8 papers.
- 2026Reasoning Models Struggle to Control their Chains of Thoughtcited by 25
- 2026Accommodation and Epistemic Vigilance: A Pragmatic Account of Why LLMs Fail to Challenge Harmful Beliefscited by 11
- 2025Whither symbols in the era of advanced neural networks?cited by 7
- 2026On-Policy Consistency Training Improves LLM Safety with Minimal Capability Degradationcited by 2
- 2025AI Identity Disclosure Under Professional Personas: A Gap Between Capacity and Consistencycited by 0
- 2026Croissant Tasks: A Metadata Format for Reproducible Machine Learning Evaluationscited by 0
- 2026Thought without systematicity? Evaluating reasoning models on rule induction taskscited by 0
- 2026What Do Current Systematic Generalization Tasks Miss? A Reasoning-Centered Analysiscited by 0
- 2026What Do Current Systematic Generalization Tasks Miss? A Reasoning-Centered Analysis16 Sep 2026
- 2026Thought without systematicity? Evaluating reasoning models on rule induction tasks12 Sep 2026
- 2026Croissant Tasks: A Metadata Format for Reproducible Machine Learning Evaluations28 May 2026
- 2026On-Policy Consistency Training Improves LLM Safety with Minimal Capability Degradation20 May 2026
- 2026Reasoning Models Struggle to Control their Chains of Thought5 Mar 2026
- 2026Accommodation and Epistemic Vigilance: A Pragmatic Account of Why LLMs Fail to Challenge Harmful Beliefs7 Jan 2026
- 2025AI Identity Disclosure Under Professional Personas: A Gap Between Capacity and Consistency26 Nov 2025
- 2025Whither symbols in the era of advanced neural networks?7 Aug 2025