DUET: Dual-Teacher On-Policy Distillation via Same-Weight Disagreement for Prohibition Compliance
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 2 more
Abstract (arXiv)
Real-world LLM deployments increasingly rely on runtime-injected prohibitions--enterprise policies, PII redlines, tool boundaries--that vary per request and per tenant. Conventional post-training is structurally ill-suited: SFT hides the violation signal in compliant labels, and DPO's sequence-level preferences mismatch token-localized violations. We propose DUET, a token-selective on-policy distillation method for prohibition compliance. DUET pairs a teacher that sees the prohibition (positive) with an identical-weight teacher that does not (negative). Because the two teachers differ only in prohibition visibility, their per-token disagreement isolates the prohibition's causal effect--yielding a clean supervision signal uncontaminated by model capacity or mismatch. This disagreement drives two complementary mechanisms: signal cleaning, which discards agreement tokens as redundant or prefix-corrupted, and preference-directed learning, which pushes the student away from the negative teacher and toward the positive one at token granularity, embedding DPO-style optimization directly into OPD without offline preference data. We construct an industrial Prohibition-Compliance benchmark spanning five task families covering explicit-refusal, paraphrase robustness, and over-refusal. Across 1.5B-8B Qwen variants, DUET achieves 72.3-85.2% violation compliance while preserving 88-93% normal utility, dramatically outperforming teacher model and other distillation baselines. External evaluation on SysBench confirms improved safety alignment with minimal degradation on GSM8K and MATH-500.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 13 of its 16 references that are in the map. First posted on arXiv 29 Jul 2026.
Builds on
13 of 16 references.
Closest ancestors · 1
Same direction, newest first
Other references · 12
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2023Let's Verify Step by Stepcited by 3,789
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2020Learning to summarize from human feedbackcited by 2,588
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2026TIP: Token Importance in On-Policy Distillationcited by 104
- 2025DistiLLM-2: A Contrastive Approach Boosts the Distillation of LLMscited by 84
- 2024FOFO: A Benchmark to Evaluate LLMs' Format-Following Capabilitycited by 80
- 2026SCOPE: Signal-Calibrated On-Policy Distillation Enhancement with Dual-Path Adaptive Weightingcited by 43
- 2025AlignDistil: Token-Level Language Model Alignment as Adaptive Policy Distillationcited by 17
- 2026Rethinking Reward Supervision: Rubric-Conditioned Self-Distillationcited by 13
- 2025SpecEval: Evaluating Model Adherence to Behavior Specificationscited by 9
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026Not All Disagreement Is Learnable: Token Teachability in On-Policy Distillation
- 2026Revisiting On-Policy Distillation: Empirical Failure Modes and Simple Fixes
- 2026Mismatch Matters: On-Policy Distillation Beyond Token Agreement
- 2026Unmasking On-Policy Distillation: Where It Helps, Where It Hurts, and Why
- 2026Escaping the KL Agreement Trap in On-Policy Distillation
- 2025ORPO-Distill: Mixed-Policy Preference Optimization for Cross-Architecture LLM Distillation
- 2026SG-OPD: Sign-Gated On-Policy Distillation via Sign-Consistency Gating and Phased Teacher Sampling
- 2026Token Utility for On-Policy Distillation via Local Trust-Region Optimization