THINKSAFE: Self-Generated Safety Alignment for Reasoning Models
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 2 more
Abstract (arXiv)
Large reasoning models (LRMs) achieve remarkable performance by leveraging reinforcement learning (RL) on reasoning tasks to generate long chain-of-thought (CoT) reasoning. However, this over-optimization often prioritizes compliance, making models vulnerable to harmful prompts. To mitigate this safety degradation, recent approaches rely on external teacher distillation, yet this introduces a distributional discrepancy that degrades native reasoning. We formalize safety realignment as a KL projection onto the safe simplex and prove that the student's own safety-filtered distribution is the unique KL-optimal target, while any external teacher incurs an irreducible excess KL penalty. Guided by this analysis, we propose ThinkSafe, a self-generated alignment framework that restores safety without external teachers. Our key insight is that while compliance suppresses safety mechanisms, models often retain latent knowledge to identify harm. ThinkSafe unlocks this via lightweight refusal steering, which preserves the KL-optimal target while increasing the acceptance rate. Experiments on DeepSeek-R1-Distill and Qwen3 show ThinkSafe significantly improves safety while preserving reasoning proficiency, and achieves superior safety and comparable reasoning to GRPO with roughly an order of magnitude less compute. Code, models, and datasets are available at https://github.com/seanie12/ThinkSafe and https://huggingface.co/Seanie-lee/collections.
Key facts. Cited by 10 papers in the map (data through 13 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 10 of its 43 references that are in the map. First posted on arXiv 30 Jan 2026.
Builds on
10 of 43 references.
Closest ancestors · 3
Same direction, newest first
- 2025LoRA is All You Need for Safety Alignment of Reasoning LLMs22 Jul
- 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
- 2025Are Smarter LLMs Safer? Exploring Safety-Reasoning Trade-offs in Prompting and Fine-Tuning13 Feb
Other references · 7
- 2017Proximal Policy Optimization Algorithmscited by 14,592
- 2021Training Verifiers to Solve Math Word Problemscited by 9,916
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,091
- 2025Qwen3 Technical Reportcited by 8,510
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,405
- 2025RL's Razor: Why Online Reinforcement Learning Forgets Lesscited by 167
- 2026Success Conditioning as Policy Improvement: The Optimization Problem Solved by Imitating Successcited by 3
Built on by
Citing papers per year: 2026: 10.
10 papers.
- 2026Reducing the Safety Tax in LLM Safety Alignment with On-Policy Self-Distillationcited by 10
- 2026Do Thinking Tokens Help with Safety?cited by 3
- 2026Harmony in Diversity: Multi-domain Contrastive Policy Optimization for Large Reasoning Modelscited by 2
- 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMscited by 1
- 2026SHARD: Safe and Helpful Alignment via Self-Reframing Distillationcited by 0
- 2026Automatic Hard Example Synthesis with Multi-Level Agentic Data Curationcited by 0
- 2026Dual-Adversarial Safety Alignment: Cultivating Intrinsic Threat Comprehension in LRMscited by 0
- 2026Safety for Whom? Boundary-Aware Self-Distillation for Controlled LLM Safety Refusalcited by 0
- 2026EOPSA: Efficient On-Policy Self-Distilled Safety Alignmentcited by 0
- 2026Safeguarding LLMs via Model-Agnostic Latent Safety Signals from Dark Knowledgecited by 0
- 2026Safeguarding LLMs via Model-Agnostic Latent Safety Signals from Dark Knowledge5 Oct 2026
- 2026EOPSA: Efficient On-Policy Self-Distilled Safety Alignment28 Sep 2026
- 2026Safety for Whom? Boundary-Aware Self-Distillation for Controlled LLM Safety Refusal3 Sep 2026
- 2026Dual-Adversarial Safety Alignment: Cultivating Intrinsic Threat Comprehension in LRMs10 Aug 2026
- 2026Automatic Hard Example Synthesis with Multi-Level Agentic Data Curation15 Jul 2026
- 2026Do Thinking Tokens Help with Safety?23 Jun 2026
- 2026SHARD: Safe and Helpful Alignment via Self-Reframing Distillation14 Jun 2026
- 2026Harmony in Diversity: Multi-domain Contrastive Policy Optimization for Large Reasoning Models25 May 2026
- 2026It Takes Two: Complementary Self-Distillation for Contextual Integrity in LLMs18 May 2026
- 2026Reducing the Safety Tax in LLM Safety Alignment with On-Policy Self-Distillation14 May 2026
Similar, not cited
Close in wording, no citation either way
- 2025Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Ability
- 2026Internalizing Safety Understanding in Large Reasoning Models via Verification
- 2026Towards Mitigating Deceptive Safety Alignment in Large Reasoning Models
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
- 2026DeShortcut-Align: Decoupling Spurious Shortcuts for Robust Safety Alignment in Large Reasoning Models
- 2025Self-Guided Adaptive Safety Alignment: Synthesizing and Internalizing Guidelines in Reasoning Models
- 2025Large Reasoning Models Learn Better Alignment from Flawed Thinking