SAFER: Probing Safety in Reward Models with Sparse Autoencoder
On the map: LLM alignment / RLHF / preference optimisation → Reward modeling and RLHF
also in 1 more
Abstract (arXiv)
Reinforcement learning from human feedback (RLHF) is a key paradigm for aligning large language models (LLMs) with human values, yet the reward models at its core remain largely opaque. In this work, we present Sparse Autoencoder For Enhanced Reward model (SAFER), a novel framework for interpreting and improving reward models through mechanistic analysis. Leveraging Sparse Autoencoders (SAEs), we uncover human-interpretable features in reward model activations, enabling insight into safety-relevant decision-making. We apply SAFER to safety-oriented preference datasets and quantify the salience of individual features by activation differences between chosen and rejected responses. Using these feature-level signals, we design targeted data poisoning and denoising strategies. Experiments show that SAFER can precisely degrade or enhance safety alignment with minimal data modification, without sacrificing general chat performance. Our approach contributes to interpreting, auditing and refining reward models in high-stakes LLM alignment tasks. Our codes are available at https://github.com/xzy-101/SAFER-code. textitThis paper discusses topics related to reward model safety and may include discussions or examples that highlight potential risks or unsafe outcomes.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Reward modeling and RLHF, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 28 of its 39 references that are in the map. First posted on arXiv 1 Jul 2025.
Builds on
28 of 39 references.
Closest ancestors · 8
Same direction, newest first
- 2024Skywork-Reward: Bag of Tricks for Reward Modeling in LLMs24 Oct
- 2024HelpSteer2-Preference: Complementing Ratings with Preferences2 Oct
- 2024Interpretable Preferences via Multi-Objective Reward Modeling and Mixture-of-Experts18 Jun
- 2024RLHF Workflow: From Reward Modeling to Online RLHF13 May
- 2024RewardBench: Evaluating Reward Models for Language Modeling20 Mar
- 2024InfoRM: Mitigating Reward Hacking in RLHF via Information-Theoretic Reward Modeling14 Feb
- 2023Fine-Grained Human Feedback Gives Better Rewards for Language Model Training2 Jun
- 2017Deep reinforcement learning from human preferences12 Jun
Other references · 20
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2020Learning to summarize from human feedbackcited by 2,588
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
- 2022Toy Models of Superpositioncited by 971
- 2024Scaling and evaluating sparse autoencoderscited by 553
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
- 2024Jumping Ahead: Improving Reconstruction Fidelity with JumpReLU Sparse Autoencoderscited by 300
8 more
- 2024Improving Dictionary Learning with Gated Sparse Autoencoderscited by 179
- 2024Best-of-Venom: Attacking RLHF by Injecting Poisoned Preference Datacited by 35
- 2023RLHFPoison: Reward Poisoning Attack for Reinforcement Learning with Human Feedback in Large Language Modelscited by 32
- 2024Is poisoning a real threat to LLM alignment? Maybe more so than you thinkcited by 28
- 2025Route Sparse Autoencoder to Interpret Large Language Modelscited by 26
- 2024Filtered Direct Preference Optimizationcited by 24
- 2024MetaMetrics: Calibrating Metrics For Generation Tasks Using Human Preferencescited by 15
- 2024Preference Poisoning Attacks on Reward Model Learningcited by 14
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2025Interpretable Reward Model via Sparse Autoencodercited by 18
- 2025AlignSAE: Concept-Aligned Sparse Autoencoderscited by 4
- 2026Preference Instability in Reward Models: Detection and Mitigation via Sparse Autoencoderscited by 1
- 2026Understanding helpfulness and harmless tension in reward modelscited by 0
- 2026When Safety Speaks a Language: A Mechanistic Analysis of Safety-Language Identity Entanglement in LLMscited by 0
- 2026RewardExplainer: Learning Reward Model Explanations from Counterfactual Preference Feedbackcited by 0
- 2026RewardExplainer: Learning Reward Model Explanations from Counterfactual Preference Feedback27 Sep 2026
- 2026When Safety Speaks a Language: A Mechanistic Analysis of Safety-Language Identity Entanglement in LLMs30 Aug 2026
- 2026Understanding helpfulness and harmless tension in reward models11 Jun 2026
- 2026Preference Instability in Reward Models: Detection and Mitigation via Sparse Autoencoders7 May 2026
- 2025AlignSAE: Concept-Aligned Sparse Autoencoders1 Dec 2025
- 2025Interpretable Reward Model via Sparse Autoencoder12 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraints
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback
- 2025SparseRM: A Lightweight Preference Modeling with Sparse Autoencoder
- 2025ENCORE: Entropy-guided Reward Composition for Multi-head Safety Reward Models
- 2025Teach a Reward Model to Correct Itself: Reward Guided Adversarial Failure Discovery for Robust Reward Modeling
- 2025On the Robustness of Reward Models for Language Model Alignment
- 2025Data-adaptive Safety Rules for Training Reward Models
- 2024Rule Based Rewards for Language Model Safety