Objective Matters: Fine-Tuning Objectives Shape Safety, Robustness, and Persona Drift
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
Abstract (arXiv)
Fine-tuning LLMs on benign data can still degrade alignment and adversarial robustness, yet direct analysis of the role of fine-tuning objectives in shaping these safety outcomes remain limited. We present a controlled comparison of six fine-tuning objectives -- Supervised Fine-Tuning, Direct Preference Optimization, Conditional Fine-Tuning, Inoculation Prompting, Odds Ratio Preference Optimization, and KL-regularized fine-tuning -- holding data, domain, architecture, and optimization fixed. Across closed-form reasoning and open-ended generation tasks, we find that objective choice induces systematic, scale-dependent shifts along the safety-capability frontier. At small training budgets, robustness is similar across objectives but capability differs. At larger budgets, objectives diverge sharply: supervised and preference-based tuning tightly couple capability gains to increased adversarial vulnerability and persona drift, while objectives that constrain learning signals -- especially ORPO and KL-regularization -- substantially mitigate both. Fine-tuning objectives therefore matter little for safety at small scales but become a primary driver of adversarial robustness and latent persona stability as training scale increases.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 21 of its 38 references that are in the map. First posted on arXiv 19 Jan 2026.
Builds on
21 of 38 references.
Closest ancestors · 2
Same direction, newest first
- 2025Efficient Switchable Safety Control in LLMs via Magic-Token-Guided Co-Training12 Aug
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
Other references · 19
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2024ORPO: Monolithic Preference Optimization without Reference Modelcited by 556
- 2018Gender Bias in Coreference Resolutioncited by 438
- 2023Low-Resource Languages Jailbreak GPT-4cited by 290
- 2023Pretraining Language Models with Human Preferencescited by 245
- 2024What is in Your Safe Data? Identifying Benign Data that Breaks Safetycited by 114
- 2022Adversarial Training for High-Stakes Reliabilitycited by 60
7 more
- 2025Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuningcited by 34
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timecited by 32
- 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignmentcited by 32
- 2025Towards Understanding Subliminal Learning: When and How Hidden Biases Transfercited by 30
- 2025Metadata Conditioning Accelerates Language Model Pre-trainingcited by 20
- 2025Reviving Your MNEME: Predicting The Side Effects of LLM Unlearning and Fine-Tuning via Sparse Model Diffingcited by 8
- 2025Accidental Vulnerability: Factors in Fine-Tuning that Shift Model Safeguardscited by 5
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2024What Makes and Breaks Safety Fine-tuning? A Mechanistic Study
- 2026RefusalGuard: Geometry-Preserving Fine-Tuning for Safety in LLMs
- 2025Vulnerability-Aware Alignment: Mitigating Uneven Forgetting in Harmful Fine-Tuning
- 2025Rethinking Safety in LLM Fine-tuning: An Optimization Perspective
- 2024Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templates
- 2026Understanding and Preserving Safety in Fine-Tuned LLMs
- 2024Do as I do (Safely): Mitigating Task-Specific Fine-tuning Risks in Large Language Models
- 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistency