ALIGNBEAM : Inference-Time Alignment Transfer via Cross-Vocabulary Logit Mixing
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Domain fine-tuning degrades the safety of large language models: fine-tuned specialists readily comply with harmful prompts framed in domain language. Existing inference-time defenses that mix logits from a safe anchor model require both models to share a vocabulary, which rules them out for the cross-family specialists where safety is most degraded. We present ALIGNBEAM, a training-free method that lifts this restriction by translating anchor logits into the target model's vocabulary token-by-token at each decoding step; a small LLM judge then selects the safest among K candidate continuations. No weights are changed, and the safety-utility trade-off can be tuned at deployment without retraining. Across both cross-vocabulary and same-vocabulary evaluation pairs, ALIGNBEAM substantially raises refusal on adversarial benchmarks while keeping task accuracy and inference overhead within practical bounds. The results show that safety alignment can be transferred between model families at inference time, without touching either model's weights.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 22 of its 25 references that are in the map. First posted on arXiv 10 Jun 2026.
Builds on
22 of 25 references.
Closest ancestors · 4
Same direction, newest first
- 2024Backtracking Improves Generation Safety22 Sep
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deep10 Jun
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Models31 May
Other references · 18
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2020What Disease does this Patient Have? A Large-scale Open Domain Question Answering Dataset from Medical Examscited by 1,324
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2022Contrastive Decoding: Open-ended Text Generation as Optimizationcited by 598
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 494
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Modelscited by 284
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 224
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
6 more
- 2023RAIN: Your Language Models Can Align Themselves without Finetuningcited by 149
- 2024Tuning Language Models by Proxycited by 88
- 2024DeAL: Decoding-time Alignment for Large Language Modelscited by 55
- 2024MedSafetyBench: Evaluating and Improving the Medical Safety of Large Language Modelscited by 43
- 2024Nudging: Inference-time Alignment of LLMs via Guided Decodingcited by 22
- 2017ANCHOR: logically-centralized security for Software-Defined Networkscited by 8
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025On Almost Surely Safe Alignment of Large Language Models at Inference-Time
- 2025TRACEALIGN -- Tracing the Drift: Attributing Alignment Failures to Training-Time Belief Sources in LLMs
- 2026Beyond Token-Level Guidance: Inference-Time Alignment of Specialized LLMs via Cross-Family Representation Steering
- 2026SafeAnchor: Preventing Cumulative Safety Erosion in Continual Domain Adaptation of Large Language Models
- 2026ReFrame: Evidence-Guided Test-Time Safety Alignment in Multimodal Large Language Models
- 2026Inference-time Alignment via Sparse Junction Steering
- 2025SABER: Uncovering Vulnerabilities in Safety Alignment via Cross-Layer Residual Connection
- 2026Safeguarding LLM Fine-tuning via Push-Pull Distributional Alignment