The Alignment Flywheel: A Governance-Centric Hybrid MAS for Architecture-Agnostic Safety
Not on the map. Why?
Abstract (arXiv)
Multi-agent systems provide mature abstractions for role decomposition, coordination, and normative governance, but increasingly capable learned components make post-deployment safety harder to inspect, audit, and update. When safety behavior is absorbed into a decision component, narrow failures may require retraining or rollback of the full component. This instantiates our vision of the Alignment Flywheel as a governance-centric hybrid MAS architecture that decouples decision generation from safety governance. We denote the agent or policy that generates candidate trajectories as the Proposer; it passes its output to a governed Safety Oracle stack, which returns safety scores, prediction uncertainty, audit coverage uncertainty, and evidence hooks through a stable interface. An Enforcement layer applies explicit risk policy at runtime. Around this loop, a governance MAS performs monitoring, red-teaming, verification, triage, refinement, and versioned release management. The central engineering principle is patch locality: many newly observed safety failures can be mitigated through small governance batches for the Oracle stack and its audit state rather than by retraining or retracting the Proposer. The architecture is implementation-agnostic with respect to both Proposer and Oracle. It defines the roles, artifacts, protocols, and release semantics needed for runtime gating, audit intake, signed updates, staged rollout, and rollback. We demonstrate executability in two scenarios: a learned spatial Oracle patched through regression-checked governance updates, and a clinical GenAI proxy setting illustrating structured norms, escalation, and audit coverage. Our implementation code and documentation are available open source at https://github.com/decide-ugent/Alignment-Flywheel.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 25 of its 63 references that are in the map. First posted on arXiv 28 Feb 2026.
Builds on
25 of 63 references.
References · 25
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
- 2019Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shiftcited by 1,287
- 2017Safe Reinforcement Learning via Shieldingcited by 449
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
- 2018A Survey of Inverse Reinforcement Learning: Challenges, Methods and Progresscited by 298
- 2023AI Alignment: A Comprehensive Surveycited by 263
- 2024RLHF Deciphered: A Critical Analysis of Reinforcement Learning from Human Feedback for LLMscited by 90
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 88
- 2022Outsider Oversight: Designing a Third Party Audit Ecosystem for AI Governancecited by 67
- 2021Run Time Assurance for Safety-Critical Systems: An Introduction to Safety Filtering Approaches for Complex Control Systemscited by 27
13 more
- 2017Continuous Integration, Delivery and Deployment: A Systematic Review on Approaches, Tools, Challenges and Practicescited by 22
- 2021Towards Observability for Production Machine Learning Pipelinescited by 10
- 2024A Comprehensive Survey on Inverse Constrained Reinforcement Learning: Definitions, Progress and Challengescited by 10
- 2025Inverse Reinforcement Learning Meets Large Language Model Post-Training: Basics, Advances, and Opportunitiescited by 7
- 2017A Component-Based Simplex Architecture for High-Assurance Cyber-Physical Systemscited by 6
- 2025ARM-FM: Automated Reward Machines via Foundation Models for Compositional Reinforcement Learningcited by 5
- 2024Reward Machine Inference for Robotic Manipulationcited by 4
- 2025Automated Alert Classification and Triage (AACT): An Intelligent System for the Prioritisation of Cybersecurity Alertscited by 4
- 2025Monitoring Machine Learning Systems: A Multivocal Literature Reviewcited by 4
- 2025Triage in Software Engineering: A Systematic Review of Research and Practicecited by 2
- 2025Be a Multitude to Itself: A Prompt Evolution Framework for Red Teamingcited by 1
- 2025Mixture of Autoencoder Experts Guidance using Unlabeled and Incomplete Data for Exploration in Reinforcement Learningcited by 1
- 2026Interactionless Inverse Reinforcement Learning: A Data-Centric Framework for Durable Alignmentcited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026SafeEvolve: Harness-Policy Co-Evolution from Agent Experience for Safety Alignment
- 2026OpenAgentFlow: Enabling System-Wide Safety Boundaries for Heterogeneous AI Agent Fleets
- 2026Institutional AI: A Governance Framework for Distributional AGI Safety
- 2025A Safety and Security Framework for Real-World Agentic Systems
- 2026On-Policy Self-Evolution via Failure Trajectories for Agentic Safety Alignment
- 2026SafeAgent: A Runtime Protection Architecture for Agentic Systems
- 2025MI9: An Integrated Runtime Governance Framework for Agentic AI
- 2026Beyond Static Alignment: Hierarchical Policy Control for LLM Safety via Risk-Aware Chain-of-Thought