mlsanityData to 7 Oct 2026

Self-Guided Adaptive Safety Alignment: Synthesizing and Internalizing Guidelines in Reasoning Models

arXiv 2511.21214 ↗First posted 26 Nov 2025cs.CL cs.AIcited by 0

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 2 more
Abstract (arXiv)

Explicit safety policies can improve reasoning-model safety, but their effective coverage may lag behind evolving jailbreak strategies. We study whether a reasoning model can synthesize and internalize a task-specific safety guideline from a small set of harmful and benign examples. We introduce Self-Guided Adaptive Safety Alignment (SGASA). The model generates a guideline, refines it on its own errors, and selects a version by self-evaluation, which can then be applied in context or distilled into the model for guideline-free inference. Across two adversarial prompt datasets and three Qwen3 scales, in-context guidelines improve a combined safety and non-over-refusal score by 20.0-45.5 points on the 8B and 14B models. Self-evaluation selects the externally best refinement round in five of six settings, while guideline generation and utilization show distinct scaling patterns. Using alignment supervision derived only from WildJailbreak, internalized models retain 13.3-14.1 point gains on WildJailbreak without an inference-time guideline. These results support self-generated guidelines as a useful intermediate representation for low-resource safety adaptation.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 24 of its 44 references that are in the map. First posted on arXiv 26 Nov 2025.

Builds on

24 of 44 references.

Closest ancestors · 7

Same direction, newest first

  1. 2025Safety in Large Reasoning Models: A Survey24 Apr
  2. 2025Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety6 Mar
  3. 2025H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking18 Feb
  4. 2025The Hidden Risks of Large Reasoning Models: A Safety Assessment of R118 Feb
  5. 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
  6. 2024OpenAI o1 System Card21 Dec
  7. 2024Deliberative Alignment: Reasoning Enables Safer Language Models20 Dec

Other references · 17

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  2. 2025Qwen3 Technical Reportcited by 8,195
  3. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
  4. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
  5. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  6. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
  7. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
  8. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
  9. 2024A StrongREJECT for Empty Jailbreakscited by 352
  10. 2025From System 1 to System 2: A Survey of Reasoning Large Language Modelscited by 319
  11. 2023The Unlocking Spell on Base LLMs: Rethinking Alignment via In-Context Learningcited by 251
  12. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
5 more
  1. 2025Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teamingcited by 172
  2. 2024Best Practices and Lessons Learned on Synthetic Datacited by 104
  3. 2024Jailbreaking Large Language Models with Symbolic Mathematicscited by 14
  4. 2024Ensuring Safe and High-Quality Outputs: A Guideline Library Approach for Language Modelscited by 2
  5. 2024Don't Command, Cultivate: An Exploratory Study of System-2 Alignmentcited by 2

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Internalizing Safety Understanding in Large Reasoning Models via Verification
  2. 2025When Models Outthink Their Safety: Unveiling and Mitigating Self-Jailbreak in Large Reasoning Models
  3. 2026Adaptive and Explicit safe: Triggering Latent Safety Awareness in Large Reasoning Models
  4. 2026THINKSAFE: Self-Generated Safety Alignment for Reasoning Models
  5. 2026Reducing the Safety Tax in LLM Safety Alignment with On-Policy Self-Distillation
  6. 2026Safety Context Injection: Inference-Time Safety Alignment via Static Filtering and Agentic Analysis
  7. 2025SAFER: Advancing Safety Alignment via Efficient Ex-Ante Reasoning
  8. 2025MetaSC: Test-Time Safety Specification Optimization for Language Models