mlsanityData to 7 Oct 2026

How Useful Is Cross-Domain Generalization for Training LLM Monitors?

arXiv 2605.12265 ↗First posted 12 May 2026cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

Using prompted language models as classifiers enables classification in domains with limited training data, but misses some of the robustness and performance benefits that fine-tuning can bring. We study whether training on multiple classification tasks, each with its own prompt, improves performance on new domains with new classification prompts. We show that such training partially generalizes to adjacent domains, improving classification performance on tasks that are unseen during training. However, we identify specific edge cases where the fine-tuned models fail to follow prompts, such as when the classification prompt changes completely while the data domain remains the same as during training. We show that classification training can be mixed with general instruction following training, and that (when done well) such training keeps the benefits of classification training and mitigates its generalization failures. Surprisingly, we see that this no-thinking supervised classification training can generalize to with-thinking classification and summarization, suggesting that no-thinking classification training might be instrumentally useful in building other kinds of classifiers and monitoring systems.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 15 of its 28 references that are in the map. First posted on arXiv 12 May 2026.

Builds on

15 of 28 references.

References · 15

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  2. 2025Qwen3 Technical Reportcited by 8,195
  3. 2020Shortcut Learning in Deep Neural Networkscited by 1,928
  4. 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,758
  5. 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,258
  6. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  7. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
  8. 2025MiniMax-M1: Scaling Test-Time Compute Efficiently with Lightning Attentioncited by 248
  9. 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 224
  10. 2023AI Control: Improving Safety Despite Intentional Subversioncited by 207
  11. 2025Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teamingcited by 172
  12. 2025Qwen3Guard Technical Reportcited by 125
3 more
  1. 2025Lessons from Defending Gemini Against Indirect Prompt Injectionscited by 40
  2. 2026Constitutional Classifiers++: Efficient Production-Grade Defenses against Universal Jailbreakscited by 36
  3. 2026Constitutional Black-Box Monitoring for Scheming in LLM Agentscited by 7

Built on by

Not cited yet.