mlsanityData to 14 Oct 2026

TriPlay-RL: Tri-Role Self-Play Reinforcement Learning for LLM Safety Alignment

arXiv 2601.18292 ↗First posted 26 Jan 2026cs.LG cs.AIcited by 6

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 2 more
Abstract (arXiv)

In recent years, safety risks associated with large language models have become increasingly prominent, highlighting the urgent need to mitigate the generation of toxic and harmful content. The mainstream paradigm for LLM safety alignment typically adopts a collaborative framework involving three roles: an attacker for adversarial prompt generation, a defender for safety defense, and an evaluator for response assessment. In this paper, we propose a closed-loop reinforcement learning framework called TriPlay-RL that enables iterative and co-improving collaboration among three roles with near-zero manual annotation. Experimental results show that the attacker preserves high output diversity while achieving a 20%-50% improvement in adversarial effectiveness; the defender attains 10%-30% gains in safety performance without degrading general reasoning capability; and the evaluator continuously refines its fine-grained judgment ability through iterations, accurately distinguishing unsafe responses, simple refusals, and useful guidance. Overall, our framework establishes an efficient and scalable paradigm for LLM safety alignment, enabling continuous co-evolution within a unified learning loop.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 22 of its 41 references that are in the map. First posted on arXiv 26 Jan 2026.

Builds on

22 of 41 references.

Closest ancestors · 4

Same direction, newest first

  1. 2025Efficient Switchable Safety Control in LLMs via Magic-Token-Guided Co-Training12 Aug
  2. 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
  3. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deep10 Jun
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul

Other references · 18

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
  3. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  4. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  5. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
  6. 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Codecited by 2,004
  7. 2022Scaling Laws for Reward Model Overoptimizationcited by 1,095
  8. 2021GLM: General Language Model Pretraining with Autoregressive Blank Infillingcited by 1,031
  9. 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 599
  10. 2018Texygen: A Benchmarking Platform for Text Generation Modelscited by 491
  11. 2024LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methodscited by 465
  12. 2025R-Zero: Self-Evolving Reasoning LLM from Zero Datacited by 228
6 more
  1. 2020Evaluating the Evaluation of Diversity in Natural Language Generationcited by 129
  2. 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 114
  3. 2023FLIRT: Feedback Loop In-context Red Teamingcited by 83
  4. 2024Learning diverse attacks on large language models for robust red-teaming and safety tuningcited by 54
  5. 2025RL Tango: Reinforcing Generator and Verifier Together for Language Reasoningcited by 40
  6. 2025Search Self-play: Pushing the Frontier of Agent Capability without Supervisioncited by 34

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 6.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Safety Alignment of LMs via Non-cooperative Games
  2. 2026Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience Replay
  3. 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization
  4. 2026MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety
  5. 2025Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models
  6. 2025Agent Safety Alignment via Reinforcement Learning
  7. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
  8. 2025Breaking the Safety-Capability Tradeoff: Reinforcement Learning with Verifiable Rewards Maintains Safety Guardrails in LLMs