Alignment Verifiability in Large Language Models: Normative Indistinguishability under Behavioral Evaluation
Not on the map. Why?
Abstract (arXiv)
Behavioral evaluation is the dominant paradigm for assessing alignment in large language models (LLMs). In current practice, observed compliance under finite evaluation protocols is treated as evidence of latent alignment. However, the inference from bounded behavioral evidence to claims about global latent properties is rarely analyzed as an identifiability problem. In this paper, we study alignment evaluation through the lens of statistical identifiability under partial observability. We allow agent policies to condition their behavior on observable signals correlated with the evaluation regime, a phenomenon we term evaluation awareness. Within this framework, we formalize the Alignment Verifiability Problem and introduce Normative Indistinguishability, which arises when distinct latent alignment hypotheses induce identical distributions over evaluator-accessible observations. Our main theoretical contribution is a conditional impossibility result: under finite behavioral evaluation and evaluation-aware policies, observed compliance does not uniquely identify latent alignment, but only membership in an equivalence class of conditionally compliant policies, under explicit assumptions on policy expressivity and observability. We complement the theory with a constructive existence proof using an instruction-tuned LLM (Llama-3.2-3B), demonstrating a conditional policy that is perfectly compliant under explicit evaluation signals yet exhibits degraded identifiability when the same evaluation intent is conveyed implicitly. Together, our results show that behavioral benchmarks provide necessary but insufficient evidence for latent alignment under evaluation awareness.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 28 of its 40 references that are in the map. First posted on arXiv 5 Feb 2026.
Builds on
28 of 40 references.
References · 28
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2020Shortcut Learning in Deep Neural Networkscited by 1,928
- 2016Concrete Problems in AI Safetycited by 1,582
- 2019Natural Adversarial Examplescited by 1,401
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
- 2022Toy Models of Superpositioncited by 928
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 828
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 733
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 619
- 2018Scalable agent alignment via reward modeling: a research directioncited by 438
16 more
- 2018AI safety via debatecited by 384
- 2019Risks from Learned Optimization in Advanced Machine Learning Systemscited by 250
- 2022The Alignment Problem from a Deep Learning Perspectivecited by 246
- 2021The GEM Benchmark: Natural Language Generation, its Evaluation and Metricscited by 239
- 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 222
- 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 172
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluatorscited by 147
- 2018Categorizing Variants of Goodhart's Lawcited by 132
- 2024AI Sandbagging: Language Models can Strategically Underperform on Evaluationscited by 131
- 2019Reward Tampering Problems and Solutions in Reinforcement Learning: A Causal Influence Diagram Perspectivecited by 107
- 2024A Systematic Survey and Critical Review on Evaluating Large Language Models: Challenges, Limitations, and Recommendationscited by 84
- 2024LLM-Rubric: A Multidimensional, Calibrated Approach to Automated Evaluation of Natural Language Textscited by 81
- 2017Reinforcement Learning with a Corrupted Reward Channelcited by 68
- 2025No Free Labels: Limitations of LLM-as-a-Judge Without Human Groundingcited by 50
- 2024Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interactioncited by 25
- 2025Detecting Proxy Gaming in RL and LLM Alignment via Evaluator Stress Testscited by 19
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Pressure Reveals Character: Behavioural Alignment Evaluation at Depth
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges
- 2025The Alignment Auditor: A Bayesian Framework for Verifying and Refining LLM Objectives
- 2025Targeting Misalignment: A Conflict-Aware Framework for Reward-Model-based LLM Alignment
- 2025Bounded Rationality for LLMs: Satisficing Alignment at Inference-Time
- 2026Emergent Unfaithfulness: How Alignment Training Causes Language Models to Silently Override Task Faithfulness
- 2025On Almost Surely Safe Alignment of Large Language Models at Inference-Time
- 2025TRACEALIGN -- Tracing the Drift: Attributing Alignment Failures to Training-Time Belief Sources in LLMs