Safety Game: Inference-Time Alignment of Black-Box LLMs via Constrained Optimization
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Ensuring that large language models (LLMs) comply with safety requirements is a central challenge in AI deployment. Existing alignment approaches primarily operate during training, such as through fine-tuning or reinforcement learning from human feedback, but these methods are costly and inflexible, requiring retraining whenever new requirements arise. Recent efforts toward inference-time alignment mitigate some of these limitations but still assume access to model internals, which is impractical, and not suitable for third party stakeholders who do not have access to the models. In this work, we propose a model-independent, black-box framework for safety alignment that does not require retraining or access to the underlying LLM architecture. As a proof of concept, we address the problem of trading off between generating safe but uninformative answers versus helpful yet potentially risky ones. We formulate this dilemma as a two-player zero-sum game whose minimax equilibrium captures the optimal balance between safety and helpfulness. LLM agents operationalize this framework by leveraging a linear programming solver at inference time to compute equilibrium strategies. Our results demonstrate the feasibility of black-box safety alignment, offering a scalable and accessible pathway for stakeholders, including smaller organizations and entities in resource-constrained settings, to enforce safety across rapidly evolving LLM ecosystems.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 27 of its 37 references that are in the map. First posted on arXiv 10 Oct 2025.
Builds on
27 of 37 references.
Closest ancestors · 3
Same direction, newest first
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal20 Jun
- 2024InferAligner: Inference-Time Alignment for Harmlessness through Cross-Model Guidance20 Jan
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned23 Aug
Other references · 24
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,601
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 865
- 2018AI safety via debatecited by 384
- 2022Self-critiquing models for assisting human evaluatorscited by 372
12 more
- 2023Nash Learning from Human Feedbackcited by 220
- 2023Controlled Decoding from Language Modelscited by 133
- 2024Trust or Escalate: LLM Judges with Provable Guarantees for Human Agreementcited by 99
- 2024Quantile Regression for Distributional Reward Models in RLHFcited by 59
- 2024Iterative Nash Policy Optimization: Aligning LLMs with General Preferences via No-Regret Learningcited by 45
- 2017Safe and Nested Subgame Solving for Imperfect-Information Gamescited by 39
- 2023The Consensus Game: Language Model Generation via Equilibrium Searchcited by 35
- 2023Gaining Wisdom from Setbacks: Aligning Large Language Models via Mistake Analysiscited by 34
- 2024Steering Language Models with Game-Theoretic Solverscited by 28
- 2024SELF-[IN]CORRECT: LLMs Struggle with Discriminating Self-Generated Responsescited by 24
- 2025On Almost Surely Safe Alignment of Large Language Models at Inference-Timecited by 13
- 2025Conformal Arbitrage: Risk-Controlled Balancing of Competing Objectives in Language Modelscited by 10
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Safety Alignment of LMs via Non-cooperative Games
- 2024Decoupled Alignment for Robust Plug-and-Play Adaptation
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges
- 2026Safety at One Shot: Patching Fine-Tuned LLMs with A Single Instance
- 2026Aligning Language Models with Selective Prediction
- 2026Aligned but Fragile: Enhancing LLM Safety Robustness via Zeroth-Order Optimization
- 2025Preemptive Detection and Steering of LLM Misalignment via Latent Reachability
- 2024Large Language Model Safety: A Holistic Survey