mlsanityData to 14 Oct 2026

PolicyAlign: Direct Policy-Based Safety Alignment for Large Language Models

arXiv 2606.25442 ↗First posted 24 Jun 2026cs.CLcited by 1

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

Safety alignment of large language models (LLMs) typically depends on high-quality supervision data, such as safe demonstrations or preference pairs. However, in real-world deployment, emerging safety requirements are often specified as natural-language policies, while corresponding supervision data may be costly, delayed, or unavailable. This creates a mismatch between rapidly evolving safety policies and conventional data-driven alignment methods. To address this, we propose PolicyAlign, a simple yet effective framework for directly aligning LLMs with safety policies. Given a safety policy, PolicyAlign first synthesizes policy-violating instructions and then performs on-policy self-distillation to internalize policy-guided behavior. To improve training stability and data efficiency, we further introduce Policy-Sensitive Filtering, which selects instructions where the policy induces the largest behavioral shift. Experiments across multiple models show that PolicyAlign consistently improves safety while maintaining low over-refusal and preserving general capabilities. PolicyAlign also generalizes to medical, legal, and financial safety scenarios, highlighting its potential as a scalable and maintainable approach to policy-based LLM safety alignment. The code is released at https://github.com/Qwen-Applications/PolicyAlign.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 30 of its 56 references that are in the map. First posted on arXiv 24 Jun 2026.

Builds on

30 of 56 references.

Closest ancestors · 4

Same direction, newest first

  1. 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization12 Dec
  2. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning20 Jul
  3. 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul

Other references · 26

  1. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  2. 2024Qwen2.5 Technical Reportcited by 4,942
  3. 2024GPT-4o System Cardcited by 4,588
  4. 2023Let's Verify Step by Stepcited by 3,789
  5. 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
  6. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  7. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  8. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
  9. 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,848
  10. 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
  11. 2026Reinforcement Learning via Self-Distillationcited by 332
  12. 2023FinanceBench: A New Benchmark for Financial Question Answeringcited by 270
14 more
  1. 2026Self-Distillation Enables Continual Learningcited by 247
  2. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
  3. 2026On-Policy Context Distillation for Language Modelscited by 186
  4. 2025Qwen3Guard Technical Reportcited by 155
  5. 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 116
  6. 2024A Survey on Large Language Models for Critical Societal Domains: Finance, Healthcare, and Lawcited by 74
  7. 2025LEXam: Benchmarking Legal Reasoning on 340 Law Examscited by 54
  8. 2026Don't Let the Claw Grip Your Hand: A Security Analysis and Defense Framework for OpenClawcited by 29
  9. 2025A Comprehensive Survey on the Trustworthiness of Large Language Models in Healthcarecited by 27
  10. 2025CARES: Comprehensive Evaluation of Safety and Adversarial Robustness in Medical LLMscited by 26
  11. 2025FORTRESS: Frontier Risk Evaluation for National Security and Public Safetycited by 24
  12. 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 15
  13. 2025TRIDENT: Benchmarking LLM Safety in Finance, Medicine, and Lawcited by 8
  14. 2025Learning to Conceal Risk: Controllable Multi-turn Red Teaming for LLMs in the Financial Domaincited by 6

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026SafeSteer: Localized On-Policy Distillation for Efficient Safety Alignment
  2. 2024Controllable Safety Alignment: Inference-Time Adaptation to Diverse Safety Requirements
  3. 2025Constrained Language Model Policy Optimization via Risk-aware Stepwise Alignment
  4. 2026Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflection
  5. 2026MOSAIC: Composable Safety Alignment with Modular Control Tokens
  6. 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching
  7. 2026On-Policy Consistency Training Improves LLM Safety with Minimal Capability Degradation
  8. 2026Reducing the Safety Tax in LLM Safety Alignment with On-Policy Self-Distillation