PolicyAlign: Direct Policy-Based Safety Alignment for Large Language Models
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Safety alignment of large language models (LLMs) typically depends on high-quality supervision data, such as safe demonstrations or preference pairs. However, in real-world deployment, emerging safety requirements are often specified as natural-language policies, while corresponding supervision data may be costly, delayed, or unavailable. This creates a mismatch between rapidly evolving safety policies and conventional data-driven alignment methods. To address this, we propose PolicyAlign, a simple yet effective framework for directly aligning LLMs with safety policies. Given a safety policy, PolicyAlign first synthesizes policy-violating instructions and then performs on-policy self-distillation to internalize policy-guided behavior. To improve training stability and data efficiency, we further introduce Policy-Sensitive Filtering, which selects instructions where the policy induces the largest behavioral shift. Experiments across multiple models show that PolicyAlign consistently improves safety while maintaining low over-refusal and preserving general capabilities. PolicyAlign also generalizes to medical, legal, and financial safety scenarios, highlighting its potential as a scalable and maintainable approach to policy-based LLM safety alignment. The code is released at https://github.com/Qwen-Applications/PolicyAlign.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 30 of its 56 references that are in the map. First posted on arXiv 24 Jun 2026.
Builds on
30 of 56 references.
Closest ancestors · 4
Same direction, newest first
- 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization12 Dec
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning20 Jul
- 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
Other references · 26
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2024GPT-4o System Cardcited by 4,588
- 2023Let's Verify Step by Stepcited by 3,789
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
- 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,848
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
- 2026Reinforcement Learning via Self-Distillationcited by 332
- 2023FinanceBench: A New Benchmark for Financial Question Answeringcited by 270
14 more
- 2026Self-Distillation Enables Continual Learningcited by 247
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
- 2026On-Policy Context Distillation for Language Modelscited by 186
- 2025Qwen3Guard Technical Reportcited by 155
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 116
- 2024A Survey on Large Language Models for Critical Societal Domains: Finance, Healthcare, and Lawcited by 74
- 2025LEXam: Benchmarking Legal Reasoning on 340 Law Examscited by 54
- 2026Don't Let the Claw Grip Your Hand: A Security Analysis and Defense Framework for OpenClawcited by 29
- 2025A Comprehensive Survey on the Trustworthiness of Large Language Models in Healthcarecited by 27
- 2025CARES: Comprehensive Evaluation of Safety and Adversarial Robustness in Medical LLMscited by 26
- 2025FORTRESS: Frontier Risk Evaluation for National Security and Public Safetycited by 24
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 15
- 2025TRIDENT: Benchmarking LLM Safety in Finance, Medicine, and Lawcited by 8
- 2025Learning to Conceal Risk: Controllable Multi-turn Red Teaming for LLMs in the Financial Domaincited by 6
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026SafeSteer: Localized On-Policy Distillation for Efficient Safety Alignment
- 2024Controllable Safety Alignment: Inference-Time Adaptation to Diverse Safety Requirements
- 2025Constrained Language Model Policy Optimization via Risk-aware Stepwise Alignment
- 2026Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflection
- 2026MOSAIC: Composable Safety Alignment with Modular Control Tokens
- 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching
- 2026On-Policy Consistency Training Improves LLM Safety with Minimal Capability Degradation
- 2026Reducing the Safety Tax in LLM Safety Alignment with On-Policy Self-Distillation