mlsanityData to 7 Oct 2026

SFCoT: Safer Chain-of-Thought via Active Safety Evaluation and Calibration

arXiv 2603.15397 ↗First posted 16 Mar 2026cs.CR cs.AIcited by 0

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 1 more
Abstract (arXiv)

Large language models (LLMs) have demonstrated remarkable capabilities in complex reasoning tasks. However, they remain highly susceptible to jailbreak attacks that undermine their safety alignment. Existing defense mechanisms typically rely on post hoc filtering applied only to the final output, leaving intermediate reasoning steps unmonitored and vulnerable to adversarial manipulation. To address this gap, this paper proposes a SaFer Chain-of-Thought (SFCoT) framework, which proactively evaluates and calibrates potentially unsafe reasoning steps in real time. SFCoT incorporates a three-tier safety scoring system alongside a multi-perspective consistency verification mechanism, designed to detect potential risks throughout the reasoning process. A dynamic intervention module subsequently performs targeted calibration to redirect reasoning trajectories toward safe outcomes. Experimental results demonstrate that SFCoT reduces the attack success rate from 58.97% to 12.31%, demonstrating it as an effective and efficient LLM safety enhancement method without a significant decline in general performance.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 17 of its 24 references that are in the map. First posted on arXiv 16 Mar 2026.

Builds on

17 of 24 references.

References · 17

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
  3. 2021Training Verifiers to Solve Math Word Problemscited by 9,743
  4. 2025Qwen3 Technical Reportcited by 8,195
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  6. 2021Program Synthesis with Large Language Modelscited by 3,509
  7. 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
  8. 2024A Survey on LLM-as-a-Judgecited by 1,384
  9. 2023A Prompt Pattern Catalog to Enhance Prompt Engineering with ChatGPTcited by 612
  10. 2023ToolQA: A Dataset for LLM Question Answering with External Toolscited by 273
  11. 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attackscited by 208
  12. 2024Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editingcited by 77
5 more
  1. 2024LLM Reasoners: New Evaluation, Library, and Analysis of Step-by-Step Reasoning with Large Language Modelscited by 70
  2. 2024SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Mannercited by 57
  3. 2024Beyond Chain-of-Thought: A Survey of Chain-of-X Paradigms for LLMscited by 48
  4. 2024LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Papercited by 9
  5. 2025CoE: Chain-of-Explanation via Automatic Visual Concept Circuit Description and Polysemanticity Quantificationcited by 9

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Beyond Content Safety: Real-Time Monitoring for Reasoning Vulnerabilities in Large Language Models
  2. 2025Enhancing Model Defense Against Jailbreaks with Proactive Safety Reasoning
  3. 2025AdvChain: Adversarial Chain-of-Thought Tuning for Robust Safety Alignment of Large Reasoning Models
  4. 2025SAFEPATH: Preventing Harmful Reasoning in Chain-of-Thought via Early Alignment
  5. 2025Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety
  6. 2025STAIR: Improving Safety Alignment with Introspective Reasoning
  7. 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities
  8. 2025SafeMLRM: Demystifying Safety in Multi-modal Large Reasoning Models