mlsanityData to 14 Oct 2026

Agentic Reinforcement Learning for Search Misaligns Instruction-Tuning

arXiv 2510.17431 ↗First posted 20 Oct 2025cs.CLcited by 1

On the map: LLM agents and tool use → Web, search, and research agents

Abstract (arXiv)

Agentic reinforcement learning (RL) trains large language models to use tools, but its impact on alignment is poorly understood. We study how agentic RL for search affects the alignment of instruction-tuned (IT) models. We find that RL-trained models inherit refusal reasoning by deflecting harmful requests into benign search queries, but this breaks down under a simple diagnostic trigger that elicits a search call before refusal can occur. Under this condition, RL models produce multi-step unsafe search actions and reasoning, reducing search query safety by up to 68.6% in Qwen and Llama models relative to their IT counterparts. The effect generalises across model families, scales, and RL algorithms. To understand why, we identify linear directions in the residual stream that control search query safety, and show that RL training progressively shifts search behaviour toward the harmful end of this direction. We thus propose representation-guided RL training, which adds a reward penalty based on projection toward the harmful search direction. Training on benign data alone, it restores IT-level alignment without reducing task accuracy and requires no additional training data. Together, our work provides the first framework for diagnosing, mechanistically analysing, and mitigating alignment degradation in agentic RL for search.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Web, search, and research agents, one of 16 directions in LLM agents and tool use. Builds on 27 of its 46 references that are in the map. First posted on arXiv 20 Oct 2025.

Builds on

27 of 46 references.

References · 27

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  5. 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
  6. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
  7. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  8. 2015High-Dimensional Continuous Control Using Generalized Advantage Estimationcited by 2,026
  9. 2025Search-R1: Training LLMs to Reason and Leverage Search Engines with Reinforcement Learningcited by 1,444
  10. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  11. 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
  12. 2022Text Embeddings by Weakly-Supervised Contrastive Pre-trainingcited by 1,253
15 more
  1. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
  2. 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
  3. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
  4. 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
  5. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
  6. 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 451
  7. 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 446
  8. 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 437
  9. 2025Rubrics as Rewards: Reinforcement Learning Beyond Verifiable Domainscited by 366
  10. 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Modelscited by 297
  11. 2025The Landscape of Agentic Reinforcement Learning for LLMs: A Surveycited by 205
  12. 2025Acting Less is Reasoning More! Teaching Model to Act Efficientlycited by 80
  13. 2024Refusal-Trained LLMs Are Easily Jailbroken As Browser Agentscited by 65
  14. 2024Trojan Detection in Large Language Models: Insights from The Trojan Detection Challengecited by 14
  15. 2024How Does DPO Reduce Toxicity? A Mechanistic Neuron-Level Analysiscited by 5

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Beneficial Reasoning Behaviors in Agentic Search and Effective Post-training to Obtain Them
  2. 2025An Empirical Study on Reinforcement Learning for Reasoning-Search Interleaved LLM Agents
  3. 2025Beyond Correctness: Rewarding Faithful Reasoning in Retrieval-Augmented Generation
  4. 2026Learning When to Act or Refuse: Guarding Agentic Reasoning Models for Safe Multi-Step Tool Use
  5. 2026PROGRESS: Coverage-guided RL to Train Search-augmented LLM Agent
  6. 2026Alignment Risks from Capability-Seeking RL Training
  7. 2026OASES: Outcome-Aligned Search-Evaluation Co-Training for Agentic Search
  8. 2026Reasoning and Tool-use Compete in Agentic RL:From Quantifying Interference to Disentangled Tuning