Robust Policy Optimization to Prevent Catastrophic Forgetting
On the map: LLM alignment / RLHF / preference optimisation → Reward modeling and RLHF
Abstract (arXiv)
Large language models are commonly trained through multi-stage post-training: first via RLHF, then fine-tuned for other downstream objectives. Yet even small downstream updates can compromise earlier learned behaviors (e.g., safety), exposing a brittleness known as catastrophic forgetting. This suggests standard RLHF objectives do not guarantee robustness to future adaptation. To address it, most prior work designs downstream-time methods to preserve previously learned behaviors. We argue that preventing this requires pre-finetuning robustness: the base policy should avoid brittle high-reward solutions whose reward drops sharply under standard fine-tuning. We propose Fine-tuning Robust Policy Optimization (FRPO), a robust RLHF framework that optimizes reward not only at the current policy, but across a KL-bounded neighborhood of policies reachable by downstream adaptation. The key idea is to ensure reward stability under policy shifts via a max-min formulation. By modifying GRPO, we develop an algorithm with no extra computation, and empirically show it substantially reduces safety degradation across multiple base models and downstream fine-tuning regimes (SFT and RL) while preserving downstream task performance. We further study a math-focused RL setting, demonstrating that FRPO preserves accuracy under subsequent fine-tuning.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Reward modeling and RLHF, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 94 of its 112 references that are in the map. First posted on arXiv 9 Feb 2026.
Builds on
94 of 112 references.
Closest ancestors · 4
Same direction, newest first
- 2025RewardBench 2: Advancing Reward Model Evaluation2 Jun
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Model29 May
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedback12 Apr
- 2017Deep reinforcement learning from human preferences12 Jun
Other references · 90
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2021Program Synthesis with Large Language Modelscited by 3,509
- 2020Learning to summarize from human feedbackcited by 2,562
- 2015Trust Region Policy Optimizationcited by 2,503
- 2016Learning without Forgettingcited by 2,465
38 more
- 2022Do As I Can, Not As I Say: Grounding Language in Robotic Affordancescited by 2,302
- 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,037
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,366
- 2016On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minimacited by 1,337
- 2016Progressive Neural Networkscited by 1,332
- 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,332
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2025Understanding R1-Zero-Like Training: A Critical Perspectivecited by 1,276
- 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,232
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2018Experience Replay for Continual Learningcited by 1,074
- 2021Learning to Prompt for Continual Learningcited by 938
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 860
- 2013An Empirical Investigation of Catastrophic Forgetting in Gradient-Based Neural Networkscited by 711
- 2022DualPrompt: Complementary Prompting for Rehearsal-free Continual Learningcited by 635
- 2023An Empirical Study of Catastrophic Forgetting in Large Language Models During Continual Fine-tuningcited by 622
- 2019Fantastic Generalization Measures and Where to Find Themcited by 507
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 450
- 2017Robust Adversarial Reinforcement Learningcited by 439
- 2021SWAD: Domain Generalization by Seeking Flat Minimacited by 431
- 2023UltraFeedback: Boosting Language Models with Scaled AI Feedbackcited by 394
- 2020Fine-Tuning Pretrained Language Models: Weight Initializations, Data Orders, and Early Stoppingcited by 377
- 2024A StrongREJECT for Empty Jailbreakscited by 352
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2018Learning Models with Uniform Performance via Distributionally Robust Optimizationcited by 334
- 2017Certifying Some Distributional Robustness with Principled Adversarial Trainingcited by 333
- 2024LoRA Learns Less and Forgets Lesscited by 313
- 2024Improving Alignment and Robustness with Circuit Breakerscited by 302
- 2023Orthogonal Subspace Learning for Language Model Continual Learningcited by 296
- 2021ASAM: Adaptive Sharpness-Aware Minimization for Scale-Invariant Learning of Deep Neural Networkscited by 293
- 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Modelscited by 284
- 2020On the Stability of Fine-tuning BERT: Misconceptions, Explanations, and Strong Baselinescited by 254
- 2020Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observationscited by 235
- 2018Re-evaluating Continual Learning Scenarios: A Categorization and Case for Strong Baselinescited by 228
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 222
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
50 most cited of 90 All 90 (JSON)
Built on by
Citing papers per year: 2026: 3.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Taming the Implicit: Dual-Channel Risk-Aware Reinforcement Fine-Tuning for Continual Multimodal Post-Training
- 2025Retaining by Doing: The Role of On-Policy Data in Mitigating Forgetting
- 2023Stabilizing RLHF through Advantage Model and Selective Rehearsal
- 2026TMS: Trajectory-Mixed Supervision for Reward-Free, On-Policy SFT
- 2025The Choice of Divergence: A Neglected Key to Mitigating Diversity Collapse in Reinforcement Learning with Verifiable Reward
- 2026Mechanistic Analysis of Catastrophic Forgetting in Large Language Models During Continual Fine-tuning
- 2026Unlocking the Critic: Reward-Free Policy Optimization for LLM Post-Training
- 2026Bridging SFT and RL: Dynamic Policy Optimization for Robust Reasoning