Recontextualization Mitigates Specification Gaming without Modifying the Specification
Not on the map. Why?
Abstract (arXiv)
Developers often struggle to specify correct training labels and rewards. Perhaps they don't need to. We propose recontextualization, which reduces how often language models "game" training signals, performing misbehaviors those signals mistakenly reinforce. We show recontextualization prevents models from learning to 1) prioritize evaluation metrics over chat response quality; 2) special-case code to pass incorrect tests; 3) overwrite evaluation functions rather than write correct code; and 4) become sycophantic. Our method works by generating completions from prompts discouraging misbehavior and then recontextualizing them as though they were in response to prompts permitting misbehavior. Recontextualization trains language models to resist misbehavior even when instructions permit it. This mitigates the reinforcement of misbehavior from misspecified training signals, reducing specification gaming without improving the supervision signal.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Builds on 38 of its 57 references that are in the map. First posted on arXiv 22 Dec 2025.
Builds on
38 of 57 references.
References · 38
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2025Qwen3 Technical Reportcited by 8,820
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Codecited by 2,004
- 2016Concrete Problems in AI Safetycited by 1,642
- 2023Instruction-Following Evaluation for Large Language Modelscited by 1,228
- 2017Hindsight Experience Replaycited by 1,136
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,055
26 more
- 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 897
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 759
- 2018AI safety via debatecited by 400
- 2025Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscationcited by 384
- 2025Persona Vectors: Monitoring and Controlling Character Traits in Language Modelscited by 345
- 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 308
- 2017Thinking Fast and Slow with Deep Learning and Tree Searchcited by 252
- 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 178
- 2024Teaching Large Language Models to Reason with Reinforcement Learningcited by 160
- 2023Chain of Hindsight Aligns Language Models with Feedbackcited by 148
- 2022Learning by Distilling Contextcited by 138
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 136
- 2024Language Models Learn to Mislead Humans via RLHFcited by 124
- 2024Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templatescited by 96
- 2025School of Reward Hacks: Hacking harmless tasks generalizes to misaligned behavior in LLMscited by 66
- 2024Correlated Proxies: A New Definition and Improved Mitigation for Reward Hackingcited by 50
- 2023RLCD: Reinforcement Learning from Contrastive Distillation for Language Model Alignmentcited by 43
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timecited by 43
- 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignmentcited by 43
- 2022Prompt Injection: Parameterization of Fixed Inputscited by 36
- 2019Conservative Agency via Attainable Utility Preservationcited by 35
- 2023Gaining Wisdom from Setbacks: Aligning Large Language Models via Mistake Analysiscited by 35
- 2024Towards Aligning Language Models with Textual Feedbackcited by 5
- 2024Evolutionary Contrastive Distillation for Language Model Alignmentcited by 3
- 2024PopAlign: Diversifying Contrasting Patterns for a More Comprehensive Alignmentcited by 2
- 2025Learning Instruction-Following Policies through Open-Ended Instruction Relabeling with Large Language Modelscited by 2
Built on by
Citing papers per year: 2026: 14.
14 papers.
Sort:
By area:
- 2026Conditional misalignment: common interventions can hide emergent misalignment behind contextual triggerscited by 17
- 2026Shaping capabilities with token-level data filteringcited by 13
- 2026Training Agents to Self-Report Misbehaviorcited by 6
- 2026Chain-of-thought obfuscation learned from output supervision can generalise to unseen taskscited by 5
- 2026Evolutionary System Prompt Learning for Reinforcement Learning in LLMscited by 5
- 2026Shifting the Gradient: Understanding How Defensive Training Methods Protect Language Model Integritycited by 3
- 2026Towards Understanding Specification Gaming in Reasoning Modelscited by 3
- 2026Inoculation Adapters: Improved Selective Generalization of Capabilities with Fewer Surprising Backdoorscited by 3
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignmentcited by 1
- 2026Alignment Risks from Capability-Seeking RL Trainingcited by 0
- 2026Demonstrating Generalization Failures via Mixtures of Conditional Policiescited by 0
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Setscited by 0
2 more
- 2026Gradient Routing Localizes and Removes Unintended Behaviors in RL12 Oct 2026
- 2026Understanding and Reducing Misalignment in Persuasion Optimization12 Oct 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Demonstrating Generalization Failures via Mixtures of Conditional Policies3 Jul 2026
- 2026Inoculation Adapters: Improved Selective Generalization of Capabilities with Fewer Surprising Backdoors29 Jun 2026
- 2026Self-Recognition Finetuning can Prevent and Reverse Emergent Misalignment4 Jun 2026
- 2026Towards Understanding Specification Gaming in Reasoning Models4 May 2026
- 2026Conditional misalignment: common interventions can hide emergent misalignment behind contextual triggers28 Apr 2026
- 2026Shifting the Gradient: Understanding How Defensive Training Methods Protect Language Model Integrity3 Apr 2026
- 2026Training Agents to Self-Report Misbehavior25 Feb 2026
- 2026Evolutionary System Prompt Learning for Reinforcement Learning in LLMs16 Feb 2026
- 2026Alignment Risks from Capability-Seeking RL Training12 Feb 2026
2 more
- 2026Training Agents to Self-Report Misbehaviorcited by 6
- 2026Evolutionary System Prompt Learning for Reinforcement Learning in LLMscited by 5
- 2026Training Agents to Self-Report Misbehavior25 Feb 2026
- 2026Evolutionary System Prompt Learning for Reinforcement Learning in LLMs16 Feb 2026
- 2026Conditional misalignment: common interventions can hide emergent misalignment behind contextual triggerscited by 17
- 2026Shaping capabilities with token-level data filteringcited by 13
- 2026Shifting the Gradient: Understanding How Defensive Training Methods Protect Language Model Integritycited by 3
- 2026Inoculation Adapters: Improved Selective Generalization of Capabilities with Fewer Surprising Backdoorscited by 3
- 2026Demonstrating Generalization Failures via Mixtures of Conditional Policiescited by 0
- 2026Understanding and Reducing Misalignment in Persuasion Optimizationcited by 0
- 2026Understanding and Reducing Misalignment in Persuasion Optimization12 Oct 2026
- 2026Demonstrating Generalization Failures via Mixtures of Conditional Policies3 Jul 2026
- 2026Inoculation Adapters: Improved Selective Generalization of Capabilities with Fewer Surprising Backdoors29 Jun 2026
- 2026Conditional misalignment: common interventions can hide emergent misalignment behind contextual triggers28 Apr 2026
- 2026Shifting the Gradient: Understanding How Defensive Training Methods Protect Language Model Integrity3 Apr 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026