Annotating the Chain-of-Thought: A Behavior-Labeled Dataset for AI Safety
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
Recent work has highlighted the importance of monitoring chain-of-thought reasoning for AI safety; however, current approaches that analyze textual reasoning steps can miss subtle harmful patterns and may be circumvented by models that hide unsafe reasoning. We present a sentence-level labeled dataset that enables activation-based monitoring of safety behaviors during LLM reasoning. Our dataset contains reasoning sequences with sentence-level annotations of safety behaviors such as expression of safety concerns or speculation on user intent, which we use to extract steering vectors for detecting and influencing these behaviors within model activations. The dataset fills a key gap in safety research: while existing datasets label reasoning holistically, effective application of steering vectors for safety monitoring could be improved by identifying precisely when specific behaviors occur within reasoning chains. We demonstrate the dataset's utility by extracting representations that both detect and steer safety behaviors in model activations, showcasing the potential of activation-level techniques for improving safety oversight on reasoning. Content Warning: This paper discusses AI safety in the context of harmful prompts and may contain references to potentially harmful content.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 14 of its 16 references that are in the map. First posted on arXiv 20 Oct 2025.
Builds on
14 of 16 references.
Closest ancestors · 3
Same direction, newest first
- 2025ReasoningShield: Safety Detection over Reasoning Traces of Large Reasoning Models22 May
- 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Data2 Apr
- 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
Other references · 11
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,359
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
- 2024A StrongREJECT for Empty Jailbreakscited by 352
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 338
- 2025Chain of Thought Monitorability: A New and Fragile Opportunity for AI Safetycited by 222
- 2024Let's Think Dot by Dot: Hidden Computation in Transformer Language Modelscited by 186
- 2025Understanding Reasoning in Thinking Language Models via Steering Vectorscited by 69
- 2025Beyond Semantics: The Unreasonable Effectiveness of Reasonless Intermediate Tokenscited by 41
- 2025A Unified Understanding and Evaluation of Steering Methodscited by 40
- 2024Towards Inference-time Category-wise Safety Steering for Large Language Modelscited by 17
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2024SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior
- 2025When Models Outthink Their Safety: Unveiling and Mitigating Self-Jailbreak in Large Reasoning Models
- 2025A Concrete Roadmap towards Safety Cases based on Chain-of-Thought Monitoring
- 2025SafeRBench: Dissecting the Reasoning Safety of Large Language Models
- 2026Evading Chain-of-Thought Monitoring Through Model Poisoning
- 2026Beyond Content Safety: Real-Time Monitoring for Reasoning Vulnerabilities in Large Language Models
- 2026Reasoning Consistency Scanning: A Framework for Auditing Chain-of-Thought Validity in AI Safety Evaluations
- 2026Chain of Risk: Safety Failures in Large Reasoning Models and Mitigation via Adaptive Multi-Principle Steering