mlsanityData to 14 Oct 2026

Oyster-II: Reinforcement Learning for Constructive Safety Alignment in Large Language Models

arXiv 2607.02914 ↗First posted 3 Jul 2026cs.AIcited by 0

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

Large language models (LLMs) have demonstrated remarkable capabilities across diverse applications, yet ensuring their simultaneous safety, helpfulness, and trustworthiness remains a persistent challenge. Conventional refusal-oriented alignment strategies mitigate harmful content generation but systematically fail to serve legitimate user needs, often withholding information that could safely and constructively address the underlying intent of sensitive queries. Building upon the constructive safety paradigm pioneered by Oyster-I, which moves beyond blanket refusal toward thoughtful, response-oriented safety alignment, we identify two critical limitations of its Supervised Fine-Tuning (SFT)-based scheme: insufficient safety generalization to out-of-distribution scenarios and a phenomenon we term safety chain-of-thought (CoT) over-generalization, wherein safety-oriented reasoning patterns are excessively applied to benign queries, degrading helpfulness and user experience. To address these limitations, we propose Oyster-II, a reinforcement learning (RL)-based constructive safety alignment framework that adopts a Zero-RL paradigm combined with a multi-stage reinforcement learning strategy.Evaluated across extensive benchmarks, Oyster-II comprehensively surpasses both Qwen3-14B and its predecessor Oyster-I on safety dimensions, achieving cross-scale performance comparable to Qwen3-Max and Qwen3.5-397B.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 53 of its 67 references that are in the map. First posted on arXiv 3 Jul 2026.

Builds on

53 of 67 references.

Closest ancestors · 5

Same direction, newest first

  1. 2025Oyster-I: Beyond Refusal -- Constructive Safety Alignment for Responsible Language Models2 Sep
  2. 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety26 May
  3. 2025Safe RLHF-V: Safe Reinforcement Learning from Multi-modal Human Feedback22 Mar
  4. 2025Improving LLM Safety Alignment with Dual-Objective Optimization5 Mar
  5. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct

Other references · 48

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  3. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  4. 2021Evaluating Large Language Models Trained on Codecited by 8,320
  5. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  6. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  7. 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,371
  8. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
  9. 2023Let's Verify Step by Stepcited by 3,789
  10. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  11. 2021Program Synthesis with Large Language Modelscited by 3,637
  12. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
36 more
  1. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  2. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
  3. 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
  4. 2024MMLU-Pro: A More Robust and Challenging Multi-Task Language Understanding Benchmarkcited by 1,848
  5. 2018CommonsenseQA: A Question Answering Challenge Targeting Commonsense Knowledgecited by 1,822
  6. 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
  7. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  8. 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,391
  9. 2023Instruction-Following Evaluation for Large Language Modelscited by 1,228
  10. 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,055
  11. 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
  12. 2025OpenAI GPT-5 System Cardcited by 989
  13. 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 861
  14. 2023AGIEval: A Human-Centric Benchmark for Evaluating Foundation Modelscited by 716
  15. 2023C-Eval: A Multi-Level Multi-Discipline Chinese Evaluation Suite for Foundation Modelscited by 708
  16. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 629
  17. 2024ORPO: Monolithic Preference Optimization without Reference Modelcited by 562
  18. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  19. 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 493
  20. 2024A StrongREJECT for Empty Jailbreakscited by 385
  21. 2024Measuring short-form factuality in large language modelscited by 373
  22. 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 308
  23. 2023Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Modelscited by 264
  24. 2023DetectLLM: Leveraging Log Rank Information for Zero-Shot Detection of Machine-Generated Textcited by 210
  25. 2024LongAlign: A Recipe for Long Context Alignment of Large Language Modelscited by 106
  26. 2019Investigating Prior Knowledge for Challenging Chinese Machine Reading Comprehensioncited by 81
  27. 2025IHEval: Evaluating Language Models on Following the Instruction Hierarchycited by 53
  28. 2025From Hard Refusals to Safe-Completions: Toward Output-Centric Safety Trainingcited by 52
  29. 2024Chinese SimpleQA: A Chinese Factuality Evaluation for Large Language Modelscited by 43
  30. 2024S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Modelscited by 33
  31. 2025Control Illusion: The Failure of Instruction Hierarchies in Large Language Modelscited by 33
  32. 2025Optimizing Safe and Aligned Language Generation: A Multi-Objective GRPO Approachcited by 24
  33. 2026Model Spec Midtraining: Improving How Alignment Training Generalizescited by 20
  34. 2025LongSafety: Evaluating Long-Context Safety of Large Language Modelscited by 12
  35. 2024LongSafety: Enhance Safety for Long-Context LLMscited by 11
  36. 2026Many-Tier Instruction Hierarchy in LLM Agentscited by 6

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
  2. 2026BSO: Safety Alignment Is Density Ratio Matching
  3. 2025Beyond SFT: Reinforcement Learning for Safer Large Reasoning Models with Better Reasoning Ability
  4. 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
  5. 2026DeShortcut-Align: Decoupling Spurious Shortcuts for Robust Safety Alignment in Large Reasoning Models
  6. 2026Alignment-Weighted DPO: A principled reasoning approach to improve safety alignment
  7. 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization
  8. 2025Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling