mlsanityData to 14 Oct 2026

Towards Safer Large Reasoning Models by Promoting Safety Decision-Making before Chain-of-Thought Generation

arXiv 2603.17368 ↗First posted 18 Mar 2026cs.AIcited by 2

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 1 more
Abstract (arXiv)

Large reasoning models (LRMs) achieved remarkable performance via chain-of-thought (CoT), but recent studies showed that such enhanced reasoning capabilities are at the expense of significantly degraded safety capabilities. In this paper, we reveal that LRMs' safety degradation occurs only after CoT is enabled, and this degradation is not observed when CoT is disabled. This observation motivates us to consider encouraging LRMs to make safety decisions before CoT generation. To this end, we propose a novel safety alignment method that promotes the safety decision-making of LRMs before starting CoT generation. Specifically, we first utilize a Bert-based classifier to extract safety decision signals from a safe model (e.g., a CoT-disabled LRM) and then integrate these signals into LRMs' safety alignment as auxiliary supervision. In this way, the safety gradients can be backpropagated to the LRMs' latent representations, effectively strengthening the LRMs' safety decision-making abilities against CoT generation. Extensive experiments demonstrate that our method substantially improves the safety capabilities of LRMs while effectively maintaining LRMs' general reasoning performance.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 37 of its 45 references that are in the map. First posted on arXiv 18 Mar 2026.

Builds on

37 of 45 references.

Closest ancestors · 6

Same direction, newest first

  1. 2025Chain-of-Thought Hijacking30 Oct
  2. 2025UnsafeChain: Enhancing Reasoning Model Safety via Hard Cases29 Jul
  3. 2025SAFEPATH: Preventing Harmful Reasoning in Chain-of-Thought via Early Alignment20 May
  4. 2025Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreaking18 Feb
  5. 2025H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking18 Feb
  6. 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb

Other references · 31

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2022Training language models to follow instructions with human feedbackcited by 15,971
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  4. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  5. 2025Qwen3 Technical Reportcited by 8,820
  6. 2021Evaluating Large Language Models Trained on Codecited by 8,320
  7. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
  8. 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
  9. 2024GPT-4o System Cardcited by 4,588
  10. 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
  11. 2023Let's Verify Step by Stepcited by 3,789
  12. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
19 more
  1. 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,211
  2. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  3. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
  4. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  5. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  6. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  7. 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,391
  8. 2025OpenAI GPT-5 System Cardcited by 989
  9. 2022STaR: Bootstrapping Reasoning With Reasoningcited by 940
  10. 2022Solving math word problems with process- and outcome-based feedbackcited by 901
  11. 2023Graph of Thoughts: Solving Elaborate Problems with Large Language Modelscited by 886
  12. 2025DeepSeek-V3.2: Pushing the Frontier of Open Large Language Modelscited by 815
  13. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 785
  14. 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 651
  15. 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 469
  16. 2024A StrongREJECT for Empty Jailbreakscited by 385
  17. 2023Certifying LLM Safety against Adversarial Promptingcited by 266
  18. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
  19. 2025Skywork Open Reasoner 1 Technical Reportcited by 165

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025SafeRBench: Dissecting the Reasoning Safety of Large Language Models
  2. 2025How Should We Enhance the Safety of Large Reasoning Models: An Empirical Study
  3. 2025Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Ability
  4. 2025Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Models
  5. 2025Safety in Large Reasoning Models: A Survey
  6. 2025ReasoningShield: Safety Detection over Reasoning Traces of Large Reasoning Models
  7. 2026Reasoning Structure Matters for Safety Alignment of Reasoning Models
  8. 2026How Does the Thinking Step Influence Model Safety? An Entropy-based Safety Reminder for LRMs