BSO: Safety Alignment Is Density Ratio Matching
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Aligning language models for both helpfulness and safety typically requires complex pipelines-separate reward and cost models, online reinforcement learning, and primal-dual updates. Recent direct preference optimization approaches simplify training but incorporate safety through ad-hoc modifications such as multi-stage procedures or heuristic margin terms, lacking a principled derivation. We show that the likelihood ratio of the optimal safe policy admits a closed-form decomposition that reduces safety alignment to a density ratio matching problem. Minimizing Bregman divergences between the data and model ratios yields Bregman Safety Optimization (BSO), a family of single-stage loss functions, each induced by a convex generator, that provably recover the optimal safe policy. BSO is both general and simple: it requires no auxiliary models, introduces only one hyperparameter beyond standard preference optimization, and recovers existing safety-aware methods as special cases. Experiments across safety alignment benchmarks show that BSO consistently improves the safety-helpfulness trade-off.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 10 of its 24 references that are in the map. First posted on arXiv 12 May 2026.
Builds on
10 of 24 references.
Closest ancestors · 3
Same direction, newest first
- 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety26 May
- 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization29 May
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
Other references · 7
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 963
- 2022Concrete Score Matching: Generalized Score Matching for Discrete Datacited by 148
- 2024Enhancing LLM Safety via Constrained Direct Preference Optimizationcited by 49
- 2025Preference Optimization by Estimating the Ratio of the Data Distributioncited by 9
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Improving Safety Alignment via Balanced Direct Preference Optimization
- 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
- 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization
- 2025Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
- 2026Oyster-II: Reinforcement Learning for Constructive Safety Alignment in Large Language Models
- 2026Cat-DPO: Category-Adaptive Safety Alignment
- 2025MPO: Multilingual Safety Alignment via Reward Gap Optimization