mlsanityData to 14 Oct 2026

Self-ReSET: Learning to Self-Recover from Unsafe Reasoning Trajectories

arXiv 2605.08936 ↗First posted 9 May 2026cs.AI cs.LGcited by 1

On the map: LLM reasoning → Reasoning for agents, planning and code

Abstract (arXiv)

Large Reasoning Models possess remarkable capabilities for self-correction in general domain; however, they frequently struggle to recover from unsafe reasoning trajectories under adversarial attacks. Existing alignment methods attempt to mitigate this vulnerability by fine-tuning the model on expert data including reflection traces or adversarial prefixes. Crucially, these approaches are often hindered by static training data which inevitably deviate from model's dynamic, on-policy reasoning traces, resulting in model hardly covering its vast generation space and learning to recover from its own failures. To bridge this gap, we propose Self-ReSET, a pure reinforcement learning framework designed to equip LRMs with the intrinsic capacity to recover from their own safety error trajectories, which are subsequently reused as an initial state for reinforcement learning. Extensive experiments across various LRMs and benchmarks demonstrate that Self-ReSET significantly enhances robustness against adversarial attacks especially out-of-distribution (OOD) jailbreak prompts while maintaining general utility, along with efficient data utilization. Further analysis reveals that our method effectively fosters self-recovery patterns, enabling models to better identify and recover from unsafe intermediate error states back to benign paths. Our codes and data are available at https://github.com/Ing1024/Self-ReSET.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 42 of its 52 references that are in the map. First posted on arXiv 9 May 2026.

Builds on

42 of 52 references.

Closest ancestors · 17

Same direction, newest first

  1. 2025Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training23 Oct
  2. 2025Large Reasoning Models Learn Better Alignment from Flawed Thinking1 Oct
  3. 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention29 Sep
  4. 2025AdvChain: Adversarial Chain-of-Thought Tuning for Robust Safety Alignment of Large Reasoning Models29 Sep
  5. 2025UnsafeChain: Enhancing Reasoning Model Safety via Hard Cases29 Jul
  6. 2025Reasoning as an Adaptive Defense for Safety1 Jul
  7. 2025SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning22 May
  8. 2025RealSafe-R1: Safety-Aligned DeepSeek-R1 without Compromising Reasoning Capability14 Apr
  9. 2025SaRO: Enhancing LLM Safety through Reasoning-based Alignment13 Apr
  10. 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Data2 Apr
  11. 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
  12. 2025A Mousetrap: Fooling Large Reasoning Models for Jailbreak with Chain of Iterative Chaos19 Feb
5 more
  1. 2025Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreaking18 Feb
  2. 2025H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking18 Feb
  3. 2025The Hidden Risks of Large Reasoning Models: A Safety Assessment of R118 Feb
  4. 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
  5. 2025STAIR: Improving Safety Alignment with Introspective Reasoning4 Feb

Other references · 25

  1. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  2. 2025Qwen3 Technical Reportcited by 8,820
  3. 2023Let's Verify Step by Stepcited by 3,789
  4. 2025DAPO: An Open-Source LLM Reinforcement Learning System at Scalecited by 2,810
  5. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  6. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  7. 2017Hindsight Experience Replaycited by 1,136
  8. 2018Experience Replay for Continual Learningcited by 1,095
  9. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  10. 2025GLM-4.5: Agentic, Reasoning, and Coding (ARC) Foundation Modelscited by 467
  11. 2025Open-Reasoner-Zero: An Open Source Approach to Scaling Up Reinforcement Learning on the Base Modelcited by 461
  12. 2024Training Language Models to Self-Correct via Reinforcement Learningcited by 426
13 more
  1. 2024A StrongREJECT for Empty Jailbreakscited by 385
  2. 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 244
  3. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
  4. 2025Qwen3Guard Technical Reportcited by 155
  5. 2025Are Sparse Autoencoders Useful? A Case Study in Sparse Probingcited by 115
  6. 2025Understanding Aha Moments: from External Observations to Internal Mechanismscited by 50
  7. 2024Backtracking Improves Generation Safetycited by 32
  8. 2025Jailbreak-R1: Exploring the Jailbreak Capabilities of LLMs via Reinforcement Learningcited by 27
  9. 2025FORTRESS: Frontier Risk Evaluation for National Security and Public Safetycited by 24
  10. 2025LEMMA: Learning from Errors for MatheMatical Advancement in LLMscited by 21
  11. 2025Can We Predict Alignment Before Models Finish Thinking? Towards Monitoring Misaligned Reasoning Modelscited by 17
  12. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learningcited by 15
  13. 2026NExT-Guard: Training-Free Streaming Safeguard without Token-Level Labelscited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026Learning Robust Reasoning through Guided Adversarial Self-Play
  2. 2026Safety Recovery in Reasoning Models Is Only a Few Early Steering Steps Away
  3. 2025Self-Guided Adaptive Safety Alignment: Synthesizing and Internalizing Guidelines in Reasoning Models
  4. 2026THINKSAFE: Self-Generated Safety Alignment for Reasoning Models
  5. 2025When Models Outthink Their Safety: Unveiling and Mitigating Self-Jailbreak in Large Reasoning Models
  6. 2026Mitigating Adaptive Attacks against Reasoning Models with Activation Consistency Training
  7. 2025Incorporating Self-Rewriting into Large Language Model Reasoning Reinforcement
  8. 2026Self-Reflection Fine-Tuning: Enhancing Agent Security against Prompt Injection Attacks from Failure Experience