mlsanityData to 7 Oct 2026

Constrained Language Model Policy Optimization via Risk-aware Stepwise Alignment

arXiv 2512.24263 ↗First posted 30 Dec 2025cs.AIcited by 0

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

When fine-tuning pre-trained Language Models (LMs) to exhibit desired behaviors, maintaining control over risk is critical for ensuring both safety and trustworthiness. Most existing safety alignment methods, such as Safe RLHF and SACPO, typically operate under a risk-neutral paradigm that is insufficient to address the risks arising from deviations from the reference policy and offers limited robustness against rare but potentially catastrophic harmful behaviors. To address this limitation, we propose Risk-aware Stepwise Alignment (RSA), a novel alignment method that explicitly incorporates risk awareness into the policy optimization process by leveraging a class of nested risk measures. Specifically, RSA formulates safety alignment as a token-level risk-aware constrained policy optimization problem and solves it through a stepwise alignment procedure that yields token-level policy updates derived from the nested risk measures. This design offers two key benefits: (1) it mitigates risks induced by excessive model shift away from a reference policy, and (2) it explicitly suppresses low-probability yet high-impact harmful behaviors. Moreover, we provide theoretical analysis on policy optimality under mild assumptions. Experimental results demonstrate that our method achieves high levels of helpfulness while ensuring strong safety and significantly suppresses tail risks, namely low-probability yet high-impact unsafe responses.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 40 of its 62 references that are in the map. First posted on arXiv 30 Dec 2025.

Builds on

40 of 62 references.

Closest ancestors · 3

Same direction, newest first

  1. 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety26 May
  2. 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization29 May
  3. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct

Other references · 37

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  3. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
  4. 2017Deep reinforcement learning from human preferencescited by 3,846
  5. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
  6. 2015Trust Region Policy Optimizationcited by 2,503
  7. 2024Mixtral of Expertscited by 1,785
  8. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
  9. 2023A Survey on Evaluation of Large Language Modelscited by 1,227
  10. 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 951
  11. 2024Yi: Open Foundation Models by 01.AIcited by 706
  12. 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
25 more
  1. 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 268
  2. 2023AI Alignment: A Comprehensive Surveycited by 256
  3. 2015Risk-Sensitive and Robust Decision-Making: a CVaR Optimization Approachcited by 162
  4. 2024FinBen: A Holistic Financial Benchmark for Large Language Modelscited by 140
  5. 2024Token-level Direct Preference Optimizationcited by 135
  6. 2025LLM Post-Training: A Deep Dive into Reasoning Large Language Modelscited by 129
  7. 2024Group Robust Preference Optimization in Reward-free RLHFcited by 94
  8. 2025Beyond Self-Talk: A Communication-Centric Survey of LLM-Based Multi-Agent Systemscited by 58
  9. 2024Large Language Model Safety: A Holistic Surveycited by 56
  10. 2024Let Me Do It For You: Towards LLM Empowered Recommendation via Tool Learningcited by 51
  11. 2024Enhancing LLM Safety via Constrained Direct Preference Optimizationcited by 47
  12. 2024The Ethics of ChatGPT in Medicine and Healthcare: A Systematic Review on Large Language Models (LLMs)cited by 45
  13. 2024Densing Law of LLMscited by 39
  14. 2023Near-Minimax-Optimal Risk-Sensitive Reinforcement Learning with CVaRcited by 32
  15. 2024Stepwise Alignment for Constrained Language Model Policy Optimizationcited by 30
  16. 2023Last-Iterate Convergent Policy Gradient Primal-Dual Methods for Constrained MDPscited by 27
  17. 2022Regret Bounds for Risk-Sensitive Reinforcement Learningcited by 26
  18. 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
  19. 2022Provably Efficient Risk-Sensitive Reinforcement Learning: Iterated CVaR and Worst Pathcited by 21
  20. 2024Towards a Unified View of Preference Learning for Large Language Models: A Surveycited by 17
  21. 2023Provably Efficient Iterated CVaR Reinforcement Learning with Function Approximation and Human Feedbackcited by 13
  22. 2021Risk-averse autonomous systems: A brief history and recent developments from the perspective of optimal controlcited by 12
  23. 2024RA-PbRL: Provably Efficient Risk-Aware Preference-Based Reinforcement Learningcited by 8
  24. 2023Provably Efficient CVaR RL in Low-rank MDPscited by 6
  25. 2025Risk-aware Direct Preference Optimization under Nested Risk Measurecited by 2

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026PolicyAlign: Direct Policy-Based Safety Alignment for Large Language Models
  2. 2026SafeSteer: Localized On-Policy Distillation for Efficient Safety Alignment
  3. 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization
  4. 2026BSO: Safety Alignment Is Density Ratio Matching
  5. 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
  6. 2026MOSAIC: Composable Safety Alignment with Modular Control Tokens
  7. 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching
  8. 2026Aligned but Fragile: Enhancing LLM Safety Robustness via Zeroth-Order Optimization