Understanding Annotator Safety Policy with Interpretability
Not on the map. Why?
Abstract (arXiv)
Safety policies define what constitutes safe and unsafe AI outputs, guiding data annotation and model development. However, annotation disagreement is pervasive and can stem from multiple sources such as operational failures (annotators misunderstand or misexecute the task), policy ambiguity (policy wording leaves room for interpretation), or value pluralism (different annotators hold different perspectives on safety). Distinguishing these sources matters. For example, operational failures call for quality control, ambiguity calls for policy clarification, and pluralism calls for deliberation about incorporating diverse perspectives. Yet understanding why annotators disagree is difficult. Directly asking annotators for their reasoning is costly, substantially increasing annotation burden, and can be unreliable for both human and LLM annotators as self-reported reasoning often fails to reflect actual decision processes. We introduce Annotator Policy Models (APMs), interpretable models that learn annotators' internal safety policies from labeling behavior alone, making annotator reasoning visible and comparable without additional annotation effort. We validate that APMs accurately model annotator safety policy (>80% accuracy), faithfully predict responses to counterfactual edits, and recover known policy differences in controlled settings. Applying APMs to LLM and human annotations, we demonstrate two core applications: (1) surfacing policy ambiguity by revealing how annotators interpret safety instructions differently, and (2) surfacing value pluralism by uncovering systematic differences in safety priorities across demographic groups. Together, these capabilities support more targeted, transparent, and inclusive safety policy design.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 42 of its 69 references that are in the map. First posted on arXiv 6 May 2026.
Builds on
42 of 69 references.
References · 42
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2025Qwen3 Technical Reportcited by 8,820
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2016Concrete Problems in AI Safetycited by 1,642
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,055
- 2020Concept Bottleneck Modelscited by 1,032
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023DSPy: Compiling Declarative Language Model Calls into Self-Improving Pipelinescited by 832
30 more
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
- 2016From Softmax to Sparsemax: A Sparse Model of Attention and Multi-Label Classificationcited by 341
- 2021Annotators with Attitudes: How Annotator Beliefs And Identities Bias Toxic Language Detectioncited by 264
- 2022Challenges and Strategies in Cross-Cultural NLPcited by 218
- 2024A Roadmap to Pluralistic Alignmentcited by 184
- 2021MultiVerS: Improving scientific claim verification with weak supervision and full-document contextcited by 143
- 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrailscited by 132
- 2024Collective Constitutional AI: Aligning a Language Model with Public Inputcited by 123
- 2024Interpreting CLIP with Sparse Linear Concept Embeddings (SpLiCE)cited by 119
- 2022Jury Learning: Integrating Dissenting Voices into Machine Learning Modelscited by 118
- 2023When the Majority is Wrong: Modeling Annotator Disagreement for Subjective Taskscited by 90
- 2023DICES Dataset: Diversity in Conversational AI Evaluation for Safetycited by 86
- 2019Problem Formulation and Fairnesscited by 85
- 2018Boolean Decision Rules via Column Generationcited by 80
- 2024PERSONA: A Reproducible Testbed for Pluralistic Alignmentcited by 73
- 2021Agreeing to Disagree: Annotating Offensive Language Datasets with Annotators' Disagreementcited by 72
- 2022"Help Me Help the AI": Understanding How Explainability Can Support Human-AI Interactioncited by 63
- 2023SemEval-2023 Task 11: Learning With Disagreements (LeWiDi)cited by 52
- 2021ConvAbuse: Data, Analysis, and Benchmarks for Nuanced Abuse Detection in Conversational AIcited by 46
- 2022Overlooked factors in concept-based explanations: Dataset choice, concept learnability, and human capabilitycited by 46
- 2025CARES: Comprehensive Evaluation of Safety and Adversarial Robustness in Medical LLMscited by 26
- 2025What's In My Human Feedback? Learning Interpretable Descriptions of Preference Datacited by 26
- 2024Annotation alignment: Comparing LLM and human annotations of conversational safetycited by 23
- 2025AI Alignment at Your Discretioncited by 20
- 2024Crowd-Calibrator: Can Annotator Disagreement Inform Calibration in Subjective Tasks?cited by 13
- 2021Hate Speech Classifiers Learn Human-Like Social Stereotypescited by 12
- 2021Two Contrasting Data Annotation Paradigms for Subjective NLP Taskscited by 12
- 2023Intersectionality in Conversational AI Safety: How Bayesian Multilevel Models Help Understand Diverse Perceptions of Safetycited by 8
- 2024Leveraging Annotator Disagreement for Text Classificationcited by 8
- 2025Statutory Construction and Interpretation for Artificial Intelligencecited by 8
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Annotating the Chain-of-Thought: A Behavior-Labeled Dataset for AI Safety
- 2025Self-Guided Adaptive Safety Alignment: Synthesizing and Internalizing Guidelines in Reasoning Models
- 2026Reasoning Consistency Scanning: A Framework for Auditing Chain-of-Thought Validity in AI Safety Evaluations
- 2026Adversarial Pragmatics for AI Safety Evaluation: A Diagnostic Framework and Seed Benchmark for Language-Mediated Control
- 2024SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior
- 2026TRACE: An Evidence-Grounded Benchmark for Safety Evaluation of Large Reasoning Models
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Experts
- 2025Policy-Grounded Safety Evaluation of 20 Large Language Models