Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Ability
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
Large reasoning models (LRMs) extend large language models by generating explicit chain-of-thought (CoT) reasoning, significantly improving mathematical and logical problem solving. However, this explicit reasoning process also introduces new safety risks, as unsafe behaviors often emerge within intermediate reasoning trajectories, even when final answers appear harmless. Existing safety alignment approaches primarily rely on supervised fine-tuning (SFT) over safety-oriented long CoT datasets. While intuitive, we find that SFT produces inconsistent safety improvements, degrades reasoning ability, and generalizes poorly across model families. These limitations suggest that purely supervised approaches are insufficient for robust safety alignment in LRMs. To address this, we investigate reinforcement learning (RL) as a complementary optimization framework for LRM safety training. Unlike SFT, RL directly optimizes model policies with reward feedback, enabling more adaptive and stable alignment. Extensive experiments across multiple model families and benchmarks show that RL achieves stronger and more consistent safety gains while maintaining reasoning competence. Further analysis of reflection dynamics and token-level entropy reveals that RL suppresses unsafe exploratory reasoning while preserving reflective depth, leading to safer and more reliable reasoning processes.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 38 of its 43 references that are in the map. First posted on arXiv 1 Dec 2025.
Builds on
38 of 43 references.
Closest ancestors · 19
Same direction, newest first
- 2025Safety in Large Reasoning Models: A Survey24 Apr
- 2025RealSafe-R1: Safety-Aligned DeepSeek-R1 without Compromising Reasoning Capability14 Apr
- 2025SaRO: Enhancing LLM Safety through Reasoning-based Alignment13 Apr
- 2025SafeMLRM: Demystifying Safety in Multi-modal Large Reasoning Models9 Apr
- 2025ShadowCoT: Cognitive Hijacking for Stealthy Reasoning Backdoors in LLMs8 Apr
- 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Data2 Apr
- 2025Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreaking18 Feb
- 2025The Hidden Risks of Large Reasoning Models: A Safety Assessment of R118 Feb
- 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
- 2025Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agents17 Feb
- 2025Safety Evaluation of DeepSeek Models in Chinese Contexts16 Feb
- 2025STAIR: Improving Safety Alignment with Introspective Reasoning4 Feb
7 more
- 2025o3-mini vs DeepSeek-R1: Which One is Safer?30 Jan
- 2025Early External Safety Testing of OpenAI's o3-mini: Insights from the Pre-Deployment Evaluation29 Jan
- 2025Deception in LLMs: Self-Preservation and Autonomous Goals in Large Language Models27 Jan
- 2025DarkMind: Latent Chain-of-Thought Backdoor in Customized LLMs24 Jan
- 2024OpenAI o1 System Card21 Dec
- 2024Deliberative Alignment: Reasoning Enables Safer Language Models20 Dec
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models20 Jan
Other references · 19
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2025Qwen3 Technical Reportcited by 8,195
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
- 2023Mamba: Linear-Time Sequence Modeling with Selective State Spacescited by 4,616
- 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,655
- 2025SFT Memorizes, RL Generalizes: A Comparative Study of Foundation Model Post-trainingcited by 655
- 2025Beyond the 80/20 Rule: High-Entropy Minority Tokens Drive Effective Reinforcement Learning for LLM Reasoningcited by 540
- 2023Understanding the Effects of RLHF on LLM Generalisation and Diversitycited by 386
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2025REINFORCE++: Stabilizing Critic-Free Policy Optimization with Global Advantage Normalizationcited by 233
- 2025Skywork-Reward-V2: Scaling Preference Data Curation via Human-AI Synergycited by 204
- 2025RL's Razor: Why Online Reinforcement Learning Forgets Lesscited by 162
7 more
- 2025RewardBench 2: Advancing Reward Model Evaluationcited by 136
- 2024OpenRLHF: An Easy-to-use, Scalable and High-performance RLHF Frameworkcited by 70
- 2024AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policiescited by 69
- 2025Effectively Controlling Reasoning Models through Thinking Interventioncited by 63
- 2023Unveiling Safety Vulnerabilities of Large Language Modelscited by 26
- 2025Evaluating the Paperclip Maximizer: Are RL-Based Language Models More Likely to Pursue Instrumental Goals?cited by 26
- 2025Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findingscited by 24
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026THINKSAFE: Self-Generated Safety Alignment for Reasoning Models
- 2026Towards Mitigating Deceptive Safety Alignment in Large Reasoning Models
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
- 2026Reasoning Structure Matters for Safety Alignment of Reasoning Models
- 2025Large Reasoning Models Learn Better Alignment from Flawed Thinking
- 2026Oyster-II: Reinforcement Learning for Constructive Safety Alignment in Large Language Models
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Models
- 2026DeShortcut-Align: Decoupling Spurious Shortcuts for Robust Safety Alignment in Large Reasoning Models