mlsanityData to 14 Oct 2026

BSO: Safety Alignment Is Density Ratio Matching

arXiv 2605.12339 ↗First posted 12 May 2026cs.LG cs.AIcited by 0

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

Aligning language models for both helpfulness and safety typically requires complex pipelines-separate reward and cost models, online reinforcement learning, and primal-dual updates. Recent direct preference optimization approaches simplify training but incorporate safety through ad-hoc modifications such as multi-stage procedures or heuristic margin terms, lacking a principled derivation. We show that the likelihood ratio of the optimal safe policy admits a closed-form decomposition that reduces safety alignment to a density ratio matching problem. Minimizing Bregman divergences between the data and model ratios yields Bregman Safety Optimization (BSO), a family of single-stage loss functions, each induced by a convex generator, that provably recover the optimal safe policy. BSO is both general and simple: it requires no auxiliary models, introduces only one hyperparameter beyond standard preference optimization, and recovers existing safety-aware methods as special cases. Experiments across safety alignment benchmarks show that BSO consistently improves the safety-helpfulness trade-off.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 10 of its 24 references that are in the map. First posted on arXiv 12 May 2026.

Builds on

10 of 24 references.

Closest ancestors · 3

Same direction, newest first

  1. 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety26 May
  2. 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization29 May
  3. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct

Other references · 7

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  4. 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 963
  5. 2022Concrete Score Matching: Generalized Score Matching for Discrete Datacited by 148
  6. 2024Enhancing LLM Safety via Constrained Direct Preference Optimizationcited by 49
  7. 2025Preference Optimization by Estimating the Ratio of the Data Distributioncited by 9

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Improving Safety Alignment via Balanced Direct Preference Optimization
  2. 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
  3. 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization
  4. 2025Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling
  5. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
  6. 2026Oyster-II: Reinforcement Learning for Constructive Safety Alignment in Large Language Models
  7. 2026Cat-DPO: Category-Adaptive Safety Alignment
  8. 2025MPO: Multilingual Safety Alignment via Reward Gap Optimization