TriPlay-RL: Tri-Role Self-Play Reinforcement Learning for LLM Safety Alignment
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 2 more
Abstract (arXiv)
In recent years, safety risks associated with large language models have become increasingly prominent, highlighting the urgent need to mitigate the generation of toxic and harmful content. The mainstream paradigm for LLM safety alignment typically adopts a collaborative framework involving three roles: an attacker for adversarial prompt generation, a defender for safety defense, and an evaluator for response assessment. In this paper, we propose a closed-loop reinforcement learning framework called TriPlay-RL that enables iterative and co-improving collaboration among three roles with near-zero manual annotation. Experimental results show that the attacker preserves high output diversity while achieving a 20%-50% improvement in adversarial effectiveness; the defender attains 10%-30% gains in safety performance without degrading general reasoning capability; and the evaluator continuously refines its fine-grained judgment ability through iterations, accurately distinguishing unsafe responses, simple refusals, and useful guidance. Overall, our framework establishes an efficient and scalable paradigm for LLM safety alignment, enabling continuous co-evolution within a unified learning loop.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 22 of its 41 references that are in the map. First posted on arXiv 26 Jan 2026.
Builds on
22 of 41 references.
Closest ancestors · 4
Same direction, newest first
- 2025Efficient Switchable Safety Control in LLMs via Magic-Token-Guided Co-Training12 Aug
- 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deep10 Jun
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
Other references · 18
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
- 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Codecited by 2,004
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,095
- 2021GLM: General Language Model Pretraining with Autoregressive Blank Infillingcited by 1,031
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 599
- 2018Texygen: A Benchmarking Platform for Text Generation Modelscited by 491
- 2024LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methodscited by 465
- 2025R-Zero: Self-Evolving Reasoning LLM from Zero Datacited by 228
6 more
- 2020Evaluating the Evaluation of Diversity in Natural Language Generationcited by 129
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 114
- 2023FLIRT: Feedback Loop In-context Red Teamingcited by 83
- 2024Learning diverse attacks on large language models for robust red-teaming and safety tuningcited by 54
- 2025RL Tango: Reinforcing Generator and Verifier Together for Language Reasoningcited by 40
- 2025Search Self-play: Pushing the Frontier of Agent Capability without Supervisioncited by 34
Built on by
Citing papers per year: 2026: 6.
6 papers.
- 2026PopuLoRA: Co-Evolving LLM Populations for Reasoning Self-Playcited by 2
- 2026The Attacker in the Mirror: Breaking Self-Consistency in Safety via Anchored Bipolicy Self-Playcited by 1
- 2026Co-Evolution in Agentic Systems: Toward Self-Directed Evolution Beyond Human Designcited by 1
- 2026CoDeL: Co-Evolutionary Defense against Indirect Prompt Injection in LLM-based Agentscited by 0
- 2026Reflections and Fragments: Securing LLMs Against Sequential Mosaic Attackscited by 0
- 2026ReSI: Recursive Safety Improvement toward Resistant and Resilient AIcited by 0
- 2026ReSI: Recursive Safety Improvement toward Resistant and Resilient AI8 Oct 2026
- 2026Reflections and Fragments: Securing LLMs Against Sequential Mosaic Attacks4 Oct 2026
- 2026CoDeL: Co-Evolutionary Defense against Indirect Prompt Injection in LLM-based Agents28 Sep 2026
- 2026Co-Evolution in Agentic Systems: Toward Self-Directed Evolution Beyond Human Design10 Aug 2026
- 2026PopuLoRA: Co-Evolving LLM Populations for Reasoning Self-Play16 May 2026
- 2026The Attacker in the Mirror: Breaking Self-Consistency in Safety via Anchored Bipolicy Self-Play8 May 2026
Similar, not cited
Close in wording, no citation either way
- 2025Safety Alignment of LMs via Non-cooperative Games
- 2026Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience Replay
- 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization
- 2026MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety
- 2025Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models
- 2025Agent Safety Alignment via Reinforcement Learning
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
- 2025Breaking the Safety-Capability Tradeoff: Reinforcement Learning with Verifiable Rewards Maintains Safety Guardrails in LLMs