mlsanityData to 14 Oct 2026

Alignment-Weighted DPO: A principled reasoning approach to improve safety alignment

arXiv 2602.21346 ↗First posted 24 Feb 2026cs.CL cs.AIcited by 2

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 1 more
Abstract (arXiv)

Recent advances in alignment techniques such as Supervised Fine-Tuning (SFT), Reinforcement Learning from Human Feedback (RLHF), and Direct Preference Optimization (DPO) have improved the safety of large language models (LLMs). However, these LLMs remain vulnerable to jailbreak attacks that disguise harmful intent through indirect or deceptive phrasing. Using causal intervention, we empirically demonstrate that this vulnerability stems from shallow alignment mechanisms that lack deep reasoning, often rejecting harmful prompts without truly understanding why they are harmful. To mitigate this vulnerability, we propose enhancing alignment through reasoning-aware post-training. We construct and release a novel Chain-of-Thought (CoT) fine-tuning dataset that includes both utility-oriented and safety-critical prompts with step-by-step rationales. Fine-tuning on this dataset encourages models to produce principled refusals grounded in reasoning, outperforming standard SFT baselines. Furthermore, inspired by failure patterns in CoT fine-tuning, we introduce Alignment-Weighted DPO, which targets the most problematic parts of an output by assigning different preference weights to the reasoning and final-answer segments. This produces finer-grained, targeted updates than vanilla DPO and improves robustness to diverse jailbreak strategies. Extensive experiments across multiple safety and utility benchmarks show that our method consistently improves alignment robustness while maintaining overall model utility.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 41 of its 64 references that are in the map. First posted on arXiv 24 Feb 2026.

Builds on

41 of 64 references.

Closest ancestors · 9

Same direction, newest first

  1. 2025RSafe: Incentivizing proactive reasoning to build robust and adaptive LLM safeguards9 Jun
  2. 2025SaRO: Enhancing LLM Safety through Reasoning-based Alignment13 Apr
  3. 2025Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety6 Mar
  4. 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
  5. 2025Are Smarter LLMs Safer? Exploring Safety-Reasoning Trade-offs in Prompting and Fine-Tuning13 Feb
  6. 2025STAIR: Improving Safety Alignment with Introspective Reasoning4 Feb
  7. 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan
  8. 2024OpenAI o1 System Card21 Dec
  9. 2024Deliberative Alignment: Reasoning Enables Safer Language Models20 Dec

Other references · 32

  1. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  2. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
  3. 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  5. 2016Understanding intermediate layers using linear classifier probescited by 1,353
  6. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
  7. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
  8. 2018What you can cram into a single vector: Probing sentence embeddings for linguistic propertiescited by 457
  9. 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 423
  10. 2025Towards Reasoning Era: A Survey of Long Chain-of-Thought for Reasoning Large Language Modelscited by 384
  11. 2023Low-Resource Languages Jailbreak GPT-4cited by 309
  12. 2024Direct Language Model Alignment from Online AI Feedbackcited by 260
20 more
  1. 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 240
  2. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
  3. 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modificationscited by 231
  4. 2023Removing RLHF Protections in GPT-4 via Fine-Tuningcited by 171
  5. 2025Phi-4-reasoning Technical Reportcited by 151
  6. 2024Safety Layers in Aligned Large Language Models: The Key to LLM Securitycited by 134
  7. 2024How Alignment and Jailbreak Work: Explain LLM Safety through Intermediate Hidden Statescited by 98
  8. 2024Towards Understanding Jailbreak Attacks in LLMs: A Representation Space Analysiscited by 64
  9. 2025Atom of Thoughts for Markov LLM Test-Time Scalingcited by 54
  10. 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neuronscited by 53
  11. 2024Towards Understanding the Fragility of Multilingual LLMs against Fine-Tuning Attackscited by 33
  12. 2025Benign Samples Matter! Fine-tuning On Outlier Benign Samples Severely Breaks Safetycited by 22
  13. 2025A Survey on LLM Test-Time Compute via Search: Tasks, LLM Profiling, Search Algorithms, and Relevant Frameworkscited by 21
  14. 2025Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical Expressioncited by 16
  15. 2024Superficial Safety Alignment Hypothesiscited by 14
  16. 2024Data Advisor: Dynamic Data Curation for Safety Alignment of Large Language Modelscited by 13
  17. 2025Safety Alignment Can Be Not Superficial With Explicit Safety Signalscited by 9
  18. 2024Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuningcited by 8
  19. 2024Minor DPO reject penalty to increase training robustnesscited by 5
  20. 2026Hair-Trigger Alignment: Black-Box Evaluation Cannot Guarantee Post-Update Alignmentcited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026DeShortcut-Align: Decoupling Spurious Shortcuts for Robust Safety Alignment in Large Reasoning Models
  2. 2025Improving LLM Safety Alignment with Dual-Objective Optimization
  3. 2026Beyond Refusal Patterns: Safe-Role Internalization for Robust and Generalizable LLM Safety Alignment
  4. 2026Oyster-II: Reinforcement Learning for Constructive Safety Alignment in Large Language Models
  5. 2026Cat-DPO: Category-Adaptive Safety Alignment
  6. 2026Improving Safety Alignment via Balanced Direct Preference Optimization
  7. 2026MOSAIC: Composable Safety Alignment with Modular Control Tokens
  8. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning