Contrastive Reasoning Alignment: Reinforcement Learning from Hidden Representations
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
We propose CRAFT, a red-teaming alignment framework that leverages model reasoning capabilities and hidden representations to improve robustness against jailbreak attacks. Unlike prior defenses that operate primarily at the output level, CRAFT aligns large reasoning models to generate safety-aware reasoning traces by explicitly optimizing objectives defined over the hidden state space. Methodologically, CRAFT integrates contrastive representation learning with reinforcement learning to separate safe and unsafe reasoning trajectories, yielding a latent-space geometry that supports robust, reasoning-level safety alignment. Theoretically, we show that incorporating latent-textual consistency into GRPO eliminates superficially aligned policies by ruling them out as local optima. Empirically, we evaluate CRAFT on multiple safety benchmarks using two strong reasoning models, Qwen3-4B-Thinking and R1-Distill-Llama-8B, where it consistently outperforms state-of-the-art defenses such as IPO and SafeKey. Notably, CRAFT delivers an average 79.0% improvement in reasoning safety and 87.7% improvement in final-response safety over the base models, demonstrating the effectiveness of hidden-space reasoning alignment.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 82 of its 107 references that are in the map. First posted on arXiv 18 Mar 2026.
Builds on
82 of 107 references.
Closest ancestors · 24
Same direction, newest first
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention29 Sep
- 2025Large Reasoning Models Are Autonomous Jailbreak Agents4 Aug
- 2025SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning22 May
- 2025SAFEPATH: Preventing Harmful Reasoning in Chain-of-Thought via Early Alignment20 May
- 2025Safety in Large Reasoning Models: A Survey24 Apr
- 2025RealSafe-R1: Safety-Aligned DeepSeek-R1 without Compromising Reasoning Capability14 Apr
- 2025SaRO: Enhancing LLM Safety through Reasoning-based Alignment13 Apr
- 2025A Survey of Frontiers in LLM Reasoning: Inference Scaling, Learning to Reason, and Agentic Systems12 Apr
- 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Data2 Apr
- 2025Cats Confuse Reasoning LLM: Query Agnostic Adversarial Triggers for Reasoning Models3 Mar
- 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
- 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrails19 Feb
12 more
- 2025Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreaking18 Feb
- 2025H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking18 Feb
- 2025The Hidden Risks of Large Reasoning Models: A Safety Assessment of R118 Feb
- 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
- 2025OverThink: Slowdown Attacks on Reasoning LLMs4 Feb
- 2025STAIR: Improving Safety Alignment with Introspective Reasoning4 Feb
- 2025Adversarial Reasoning at Jailbreaking Time3 Feb
- 2025Trading Inference-Time Compute for Adversarial Robustness31 Jan
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan
- 2024Deliberative Alignment: Reasoning Enables Safer Language Models20 Dec
- 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Code12 Mar
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs12 Jan
Other references · 58
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2025Qwen3 Technical Reportcited by 8,820
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
- 2024GPT-4o System Cardcited by 4,588
38 more
- 2023Let's Verify Step by Stepcited by 3,789
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,442
- 2023Qwen Technical Reportcited by 3,344
- 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,211
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2022Solving Quantitative Reasoning Problems with Language Modelscited by 1,392
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2022Measuring and Narrowing the Compositionality Gap in Language Modelscited by 1,075
- 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
- 2025Does Reinforcement Learning Really Incentivize Reasoning Capacity in LLMs Beyond the Base Model?cited by 982
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
- 2023Graph of Thoughts: Solving Elaborate Problems with Large Language Modelscited by 886
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 785
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
- 2023Instruction Tuning with GPT-4cited by 686
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 656
- 2023WizardMath: Empowering Mathematical Reasoning for Large Language Models via Reinforced Evol-Instructcited by 625
- 2023Plan-and-Solve Prompting: Improving Zero-Shot Chain-of-Thought Reasoning by Large Language Modelscited by 560
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
- 2024A StrongREJECT for Empty Jailbreakscited by 385
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 247
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 244
- 2025Cosmos-Reason1: From Physical Common Sense To Embodied Reasoningcited by 164
- 2025Phi-4-reasoning Technical Reportcited by 151
- 2024Group Robust Preference Optimization in Reward-free RLHFcited by 95
- 2024Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapescited by 74
- 2024LLM Reasoners: New Evaluation, Library, and Analysis of Step-by-Step Reasoning with Large Language Modelscited by 70
- 2025Effectively Controlling Reasoning Models through Thinking Interventioncited by 65
- 2024SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Mannercited by 63
- 2023Assessing Prompt Injection Risks in 200+ Custom GPTscited by 55
- 2025Embodied-Reasoner: Synergizing Visual Search, Reasoning, and Action for Embodied Interactive Taskscited by 44
- 2025R-PRM: Reasoning-Driven Process Reward Modelingcited by 38
- 2024Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundariescited by 28
- 2024Chain-of-Action: Faithful and Multimodal Question Answering through Large Language Modelscited by 27
- 2024Adversarial Tuning: Defending Against Jailbreak Attacks for LLMscited by 26
- 2024Model Surgery: Modulating LLM's Behavior Via Simple Parameter Editingcited by 23
50 most cited of 58 All 58 (JSON)
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Towards Mitigating Deceptive Safety Alignment in Large Reasoning Models
- 2026Safety Recovery in Reasoning Models Is Only a Few Early Steering Steps Away
- 2026THINKSAFE: Self-Generated Safety Alignment for Reasoning Models
- 2025Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Ability
- 2026Alignment-Weighted DPO: A principled reasoning approach to improve safety alignment
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
- 2025RAJ-PGA: Reasoning-Activated Jailbreak and Principle-Guided Alignment Framework for Large Reasoning Models
- 2026DeShortcut-Align: Decoupling Spurious Shortcuts for Robust Safety Alignment in Large Reasoning Models