mlsanityData to 14 Oct 2026

Safety Training Modulates Harmful Misalignment Under On-Policy RL, But Direction Depends on Environment Design

arXiv 2604.12500 ↗First posted 14 Apr 2026cs.LG cs.CRcited by 0

Not on the map. Why?

Abstract (arXiv)

Specification gaming under Reinforcement Learning (RL) is known to cause LLMs to develop sycophantic, manipulative, or deceptive behavior, yet the conditions under which this occurs remain unclear. We train 11 instruction-tuned LLMs (0.5B-14B) with on-policy RL across 3 environments and find that model size acts as a safety buffer in some environments but enables greater harmful exploitation in others. Controlled ablations trace this reversal to environment-specific features such as role framing and implicit gameability cues. We further show that most safety benchmarks do not predict RL-induced misalignment, except in the case of Sycophancy scores when the exploit relies on inferring the user's preference. Finally, we find that on-policy RL preserves a safety buffer inherent in the model's own generation distribution, one that is bypassed during off-policy settings.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 25 of its 42 references that are in the map. First posted on arXiv 14 Apr 2026.

Builds on

25 of 42 references.

References · 25

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  3. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  4. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  5. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  6. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  7. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  8. 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
  9. 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
  10. 2023Large Language Modelscited by 780
  11. 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 710
  12. 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
13 more
  1. 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 672
  2. 2023RLAIF vs. RLHF: Scaling Reinforcement Learning from Human Feedback with AI Feedbackcited by 625
  3. 2019Bias in Bios: A Case Study of Semantic Representation Bias in a High-Stakes Settingcited by 349
  4. 2022The Effects of Reward Misspecification: Mapping and Mitigating Misaligned Modelscited by 328
  5. 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 182
  6. 2023Evaluating and Mitigating Discrimination in Language Model Decisionscited by 124
  7. 2024Language Models Learn to Mislead Humans via RLHFcited by 124
  8. 2017AI Safety Gridworldscited by 110
  9. 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 61
  10. 2025SimulatorArena: Are User Simulators Reliable Proxies for Multi-Turn Evaluation of AI Assistants?cited by 50
  11. 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 47
  12. 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timecited by 43
  13. 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignmentcited by 43

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Breaking the Safety-Capability Tradeoff: Reinforcement Learning with Verifiable Rewards Maintains Safety Guardrails in LLMs
  2. 2026Alignment Risks from Capability-Seeking RL Training
  3. 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Models
  4. 2026Reinforcement Learning Towards Broadly and Persistently Beneficial Models
  5. 2026PREFINE: Preference-Based Implicit Reward and Cost Fine-Tuning for Safety Alignment
  6. 2025Safe But Not Sorry: Reducing Over-Conservatism in Safety Critics via Uncertainty-Aware Modulation
  7. 2026Behind Harmful Compliance: Behavioral and Mechanistic Divergence Across LLM Jailbreaks
  8. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning