Constrained Language Model Policy Optimization via Risk-aware Stepwise Alignment
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
When fine-tuning pre-trained Language Models (LMs) to exhibit desired behaviors, maintaining control over risk is critical for ensuring both safety and trustworthiness. Most existing safety alignment methods, such as Safe RLHF and SACPO, typically operate under a risk-neutral paradigm that is insufficient to address the risks arising from deviations from the reference policy and offers limited robustness against rare but potentially catastrophic harmful behaviors. To address this limitation, we propose Risk-aware Stepwise Alignment (RSA), a novel alignment method that explicitly incorporates risk awareness into the policy optimization process by leveraging a class of nested risk measures. Specifically, RSA formulates safety alignment as a token-level risk-aware constrained policy optimization problem and solves it through a stepwise alignment procedure that yields token-level policy updates derived from the nested risk measures. This design offers two key benefits: (1) it mitigates risks induced by excessive model shift away from a reference policy, and (2) it explicitly suppresses low-probability yet high-impact harmful behaviors. Moreover, we provide theoretical analysis on policy optimality under mild assumptions. Experimental results demonstrate that our method achieves high levels of helpfulness while ensuring strong safety and significantly suppresses tail risks, namely low-probability yet high-impact unsafe responses.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 40 of its 62 references that are in the map. First posted on arXiv 30 Dec 2025.
Builds on
40 of 62 references.
Closest ancestors · 3
Same direction, newest first
- 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety26 May
- 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization29 May
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
Other references · 37
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2015Trust Region Policy Optimizationcited by 2,503
- 2024Mixtral of Expertscited by 1,785
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 951
- 2024Yi: Open Foundation Models by 01.AIcited by 706
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
25 more
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 268
- 2023AI Alignment: A Comprehensive Surveycited by 256
- 2015Risk-Sensitive and Robust Decision-Making: a CVaR Optimization Approachcited by 162
- 2024FinBen: A Holistic Financial Benchmark for Large Language Modelscited by 140
- 2024Token-level Direct Preference Optimizationcited by 135
- 2025LLM Post-Training: A Deep Dive into Reasoning Large Language Modelscited by 129
- 2024Group Robust Preference Optimization in Reward-free RLHFcited by 94
- 2025Beyond Self-Talk: A Communication-Centric Survey of LLM-Based Multi-Agent Systemscited by 58
- 2024Large Language Model Safety: A Holistic Surveycited by 56
- 2024Let Me Do It For You: Towards LLM Empowered Recommendation via Tool Learningcited by 51
- 2024Enhancing LLM Safety via Constrained Direct Preference Optimizationcited by 47
- 2024The Ethics of ChatGPT in Medicine and Healthcare: A Systematic Review on Large Language Models (LLMs)cited by 45
- 2024Densing Law of LLMscited by 39
- 2023Near-Minimax-Optimal Risk-Sensitive Reinforcement Learning with CVaRcited by 32
- 2024Stepwise Alignment for Constrained Language Model Policy Optimizationcited by 30
- 2023Last-Iterate Convergent Policy Gradient Primal-Dual Methods for Constrained MDPscited by 27
- 2022Regret Bounds for Risk-Sensitive Reinforcement Learningcited by 26
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
- 2022Provably Efficient Risk-Sensitive Reinforcement Learning: Iterated CVaR and Worst Pathcited by 21
- 2024Towards a Unified View of Preference Learning for Large Language Models: A Surveycited by 17
- 2023Provably Efficient Iterated CVaR Reinforcement Learning with Function Approximation and Human Feedbackcited by 13
- 2021Risk-averse autonomous systems: A brief history and recent developments from the perspective of optimal controlcited by 12
- 2024RA-PbRL: Provably Efficient Risk-Aware Preference-Based Reinforcement Learningcited by 8
- 2023Provably Efficient CVaR RL in Low-rank MDPscited by 6
- 2025Risk-aware Direct Preference Optimization under Nested Risk Measurecited by 2
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026PolicyAlign: Direct Policy-Based Safety Alignment for Large Language Models
- 2026SafeSteer: Localized On-Policy Distillation for Efficient Safety Alignment
- 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization
- 2026BSO: Safety Alignment Is Density Ratio Matching
- 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
- 2026MOSAIC: Composable Safety Alignment with Modular Control Tokens
- 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching
- 2026Aligned but Fragile: Enhancing LLM Safety Robustness via Zeroth-Order Optimization