EnchTable: Unified Safety Alignment Transfer in Fine-tuned Large Language Models
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Many machine learning models are fine-tuned from large language models (LLMs) to achieve high performance in specialized domains like code generation, biomedical analysis, and mathematical problem solving. However, this fine-tuning process often introduces a critical vulnerability: the systematic degradation of safety alignment, undermining ethical guidelines and increasing the risk of harmful outputs. Addressing this challenge, we introduce EnchTable, a novel framework designed to transfer and maintain safety alignment in downstream LLMs without requiring extensive retraining. EnchTable leverages a Neural Tangent Kernel (NTK)-based safety vector distillation method to decouple safety constraints from task-specific reasoning, ensuring compatibility across diverse model architectures and sizes. Additionally, our interference-aware merging technique effectively balances safety and utility, minimizing performance compromises across various task domains. We implemented a fully functional prototype of EnchTable on three different task domains and three distinct LLM architectures, and evaluated its performance through extensive experiments on eleven diverse datasets, assessing both utility and model safety. Our evaluations include LLMs from different vendors, demonstrating EnchTable's generalization capability. Furthermore, EnchTable exhibits robust resistance to static and dynamic jailbreaking attacks, outperforming vendor-released safety models in mitigating adversarial prompts. Comparative analyses with six parameter modification methods and two inference-time alignment baselines reveal that EnchTable achieves a significantly lower unsafe rate, higher utility score, and universal applicability across different task domains. Additionally, we validate EnchTable can be seamlessly integrated into various deployment pipelines without significant overhead.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 36 of its 90 references that are in the map. First posted on arXiv 13 Nov 2025.
Builds on
36 of 90 references.
Closest ancestors · 6
Same direction, newest first
- 2024Safety Layers in Aligned Large Language Models: The Key to LLM Security30 Aug
- 2024Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning18 Aug
- 2024Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack2 Feb
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations10 Oct
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
Other references · 30
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2024Qwen2.5 Technical Reportcited by 4,713
- 2023Qwen Technical Reportcited by 3,273
- 2023A Survey of Large Language Modelscited by 2,537
- 2023Code Llama: Open Foundation Models for Codecited by 2,105
- 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,442
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2024OpenAI o1 System Cardcited by 1,220
18 more
- 2024Qwen2.5-Coder Technical Reportcited by 1,151
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2021A Survey of Transformerscited by 399
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
- 2023Physics of Language Models: Part 3.1, Knowledge Storage and Extractioncited by 264
- 2024OpenCodeInterpreter: Integrating Code Generation with Execution and Refinementcited by 242
- 2024Lessons from the Trenches on Reproducible Evaluation of Language Modelscited by 172
- 2023Fundamental Limitations of Alignment in Large Language Modelscited by 152
- 2024Orca-Math: Unlocking the potential of SLMs in Grade School Mathcited by 151
- 2024Task Singular Vectors: Reducing Task Interference in Model Mergingcited by 143
- 2023BioMedGPT: Open Multimodal Generative Pre-trained Transformer for BioMedicinecited by 99
- 2023EasyEdit: An Easy-to-use Knowledge Editing Framework for Large Language Modelscited by 97
- 2023Fine-tuning can cripple your foundation model; preserving features may be the solutioncited by 92
- 2023Parameter Efficient Multi-task Model Fusion with Partial Linearizationcited by 64
- 2024SEAL: Safety-enhanced Aligned LLM Fine-tuning via Bilevel Data Selectioncited by 64
- 2022LM-Debugger: An Interactive Tool for Inspection and Intervention in Transformer-Based Language Modelscited by 28
- 2023Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biasescited by 21
- 2025AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvementcited by 11
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025SafeMERGE: Preserving Safety Alignment in Fine-Tuned Large Language Models via Selective Layer-Wise Model Merging
- 2026Safety at One Shot: Patching Fine-Tuned LLMs with A Single Instance
- 2026LSSF: Safety Alignment for Large Language Models through Low-Rank Safety Subspace Fusion
- 2025SAFER: Advancing Safety Alignment via Efficient Ex-Ante Reasoning
- 2026Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflection
- 2024Locking Down the Finetuned LLMs Safety
- 2024Safety Arithmetic: A Framework for Test-time Safety Alignment of Language Models by Steering Parameters and Activations
- 2025Vulnerability Mitigation for Safety-Aligned Language Models via Debiasing