Cat-DPO: Category-Adaptive Safety Alignment
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
Abstract (arXiv)
Aligning large language models with human preferences must balance two competing goals: responding helpfully to legitimate requests and reliably refusing harmful ones. Most preference-based safety alignment methods collapse safety into a single scalar that is applied uniformly to every preference pair. The result is a model that looks safe on average but stays relatively unsafe on a minority of harm categories. We cast safety alignment as a per-category constrained optimization problem and derive Cat-DPO, a direct-preference-optimization algorithm with a separate adaptive safety margin for each harm category. The margin tightens when the model still produces unsafe responses on a category and relaxes once the model catches up, so the training signal tracks each category's current difficulty rather than averaging under one global rate. Across two LLM backbones and six preference-learning baselines, Cat-DPO improves aggregate helpfulness and harmlessness and compresses per-category safety variance and the best-to-worst gap, offering a drop-in per-category refinement of direct preference safety alignment.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 35 of its 44 references that are in the map. First posted on arXiv 19 Apr 2026.
Builds on
35 of 44 references.
Closest ancestors · 4
Same direction, newest first
- 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety26 May
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preference20 Jun
- 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization29 May
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
Other references · 31
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2025Qwen3 Technical Reportcited by 8,195
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2024GPT-4o System Cardcited by 4,467
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2021Convex optimizationcited by 2,479
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 951
- 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 906
19 more
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2018Reward Constrained Policy Optimizationcited by 397
- 2018Fairness Without Demographics in Repeated Loss Minimizationcited by 363
- 2019Constrained Reinforcement Learning Has Zero Duality Gapcited by 144
- 2023Beyond One-Preference-Fits-All Alignment: Multi-Objective Direct Preference Optimizationcited by 121
- 2024Group Robust Preference Optimization in Reward-free RLHFcited by 94
- 2024Towards Robust Alignment of Language Models: Distributionally Robustifying Direct Preference Optimizationcited by 52
- 2025From Hard Refusals to Safe-Completions: Toward Output-Centric Safety Trainingcited by 49
- 2024Stepwise Alignment for Constrained Language Model Policy Optimizationcited by 30
- 2024AlphaDPO: Adaptive Reward Margin for Direct Preference Optimizationcited by 27
- 2024AD-LLM: Benchmarking Large Language Models for Anomaly Detectioncited by 25
- 2024Direct Preference Optimization With Unobserved Preference Heterogeneity: The Necessity of Ternary Preferencescited by 23
- 2025Robust LLM Alignment via Distributionally Robust Direct Preference Optimizationcited by 17
- 2025A Personalized Conversational Benchmark: Towards Simulating Personalized Conversationscited by 16
- 2026Auditable Agentscited by 14
- 2026No Attacker Needed: Unintentional Cross-User Contamination in Shared-State LLM Agentscited by 6
- 2026GNN-as-Judge: Unleashing the Power of LLMs for Graph Learning with GNN Feedbackcited by 4
- 2025AMaPO: Adaptive Margin-attached Preference Optimization for Language Model Alignmentcited by 2
- 2025Margin Adaptive DPO: Leveraging Reward Model for Granular Control in Preference Optimizationcited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026Suan: Rectifying Direct Preference Safety Alignment in Large Language Models
- 2026Improving Safety Alignment via Balanced Direct Preference Optimization
- 2026BSO: Safety Alignment Is Density Ratio Matching
- 2025Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling
- 2026Can Safety Emerge from Weak Supervision? A Systematic Analysis of Small Language Models
- 2025Safe at the Margins: A General Approach to Safety Alignment in Low-Resource English Languages -- A Singlish Case Study
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges
- 2026Alignment-Weighted DPO: A principled reasoning approach to improve safety alignment