mlsanityData to 7 Oct 2026

Safety Alignment as Continual Learning: Mitigating the Alignment Tax via Orthogonal Gradient Projection

arXiv 2602.07892 ↗First posted 8 Feb 2026cs.LG cs.CLcited by 6

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

Safety post-training can improve the harmfulness and policy compliance of Large Language Models (LLMs), but it may also reduce general utility, a phenomenon often described as the alignment tax. We study this trade-off through the lens of continual learning: sequential alignment stages expose the model to shifted data distributions and objectives, and their gradients may interfere with directions that support previously acquired general capabilities. This view does not claim that all alignment degradation has a single cause; rather, it provides a useful first-order mechanism for mitigating one important source of capability regression. We propose Orthogonal Gradient Projection for Safety Alignment (OGPSA), a lightweight update rule that estimates a low-rank reference subspace from gradients on a small set of general-capability data and removes from each safety gradient the component lying in this subspace. The resulting update is the steepest local safety-descent direction subject to first-order preservation constraints on the reference objectives. OGPSA is compatible with standard post-training pipelines and avoids large-scale replay, although it introduces periodic reference-gradient computation. Across Supervised Fine-Tuning (SFT), Direct Preference Optimization (DPO), and sequential SFTrightarrowDPO settings, OGPSA improves the observed safety--utility trade-off over standard baselines. Under the sequential SFTrightarrowDPO pipeline, the average performance gain increases from 33.98% to 42.74% on Qwen2.5-7B-Instruct and from 19.74% to 32.98% on Llama3.1-8B-Instruct. We have open sourced our code at https://github.com/SunGL001/OGPSA.

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 64 of its 78 references that are in the map. First posted on arXiv 8 Feb 2026.

Builds on

64 of 78 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025STAIR: Improving Safety Alignment with Introspective Reasoning4 Feb
  2. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct

Other references · 62

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2022Training language models to follow instructions with human feedbackcited by 15,712
  3. 2024The Llama 3 Herd of Modelscited by 14,192
  4. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  5. 2021Training Verifiers to Solve Math Word Problemscited by 9,743
  6. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  7. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  8. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  9. 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
  10. 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
  11. 2024Qwen2.5 Technical Reportcited by 4,713
  12. 2023Qwen Technical Reportcited by 3,273
38 more
  1. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,748
  2. 2016Learning without Forgettingcited by 2,465
  3. 2017Gradient Episodic Memory for Continual Learningcited by 1,871
  4. 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,442
  5. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
  6. 2023Instruction-Following Evaluation for Large Language Modelscited by 1,143
  7. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  8. 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
  9. 2021Learning to Prompt for Continual Learningcited by 938
  10. 2020Dark Experience for General Continual Learning: a Strong, Simple Baselinecited by 895
  11. 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 860
  12. 2021Robust fine-tuning of zero-shot modelscited by 785
  13. 2020Intrinsic Dimensionality Explains the Effectiveness of Language Model Fine-Tuningcited by 658
  14. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
  15. 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 533
  16. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
  17. 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 478
  18. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
  19. 2023UltraFeedback: Boosting Language Models with Scaled AI Feedbackcited by 394
  20. 2023Understanding the Effects of RLHF on LLM Generalisation and Diversitycited by 386
  21. 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 377
  22. 2024A StrongREJECT for Empty Jailbreakscited by 352
  23. 2024Measuring short-form factuality in large language modelscited by 345
  24. 2021Gradient Projection Memory for Continual Learningcited by 338
  25. 2023HaluEval: A Large-Scale Hallucination Evaluation Benchmark for Large Language Modelscited by 329
  26. 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 292
  27. 2023AdaMerging: Adaptive Model Merging for Multi-Task Learningcited by 248
  28. 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
  29. 2023Using an LLM to Help With Code Understandingcited by 222
  30. 2023Mitigating the Alignment Tax of RLHFcited by 181
  31. 2023SLCA: Slow Learner with Classifier Alignment for Continual Learning on a Pre-trained Modelcited by 178
  32. 2023How Robust is Google's Bard to Adversarial Image Attacks?cited by 177
  33. 2023RanPAC: Random Projections and Pre-trained Models for Continual Learningcited by 162
  34. 2024Continual Learning with Pre-Trained Models: A Surveycited by 151
  35. 2023Beyond One-Preference-Fits-All Alignment: Multi-Objective Direct Preference Optimizationcited by 121
  36. 2024Improved Techniques for Optimization-Based Jailbreaking on Large Language Modelscited by 98
  37. 2021Continual Learning for Text Classification with Information Disentanglement Based Regularizationcited by 86
  38. 2022TRGP: Trust Region Gradient Projection for Continual Learningcited by 79

50 most cited of 62 All 62 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 6.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Continual Safety Alignment via Gradient-Based Sample Selection
  2. 2025Unforgotten Safety: Preserving Safety Alignment of Large Language Models with Continual Learning
  3. 2026Safety at One Shot: Patching Fine-Tuned LLMs with A Single Instance
  4. 2026Aligned but Fragile: Enhancing LLM Safety Robustness via Zeroth-Order Optimization
  5. 2026LSSF: Safety Alignment for Large Language Models through Low-Rank Safety Subspace Fusion
  6. 2026SafeSteer: Localized On-Policy Distillation for Efficient Safety Alignment
  7. 2026GR-SAP: Generative Replay for Safety Alignment Preservation during Fine-Tuning
  8. 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching