mlsanityData to 14 Oct 2026

DUET: Dual-Teacher On-Policy Distillation via Same-Weight Disagreement for Prohibition Compliance

arXiv 2608.14644 ↗First posted 29 Jul 2026cs.LG cs.CLcited by 1

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 2 more
Abstract (arXiv)

Real-world LLM deployments increasingly rely on runtime-injected prohibitions--enterprise policies, PII redlines, tool boundaries--that vary per request and per tenant. Conventional post-training is structurally ill-suited: SFT hides the violation signal in compliant labels, and DPO's sequence-level preferences mismatch token-localized violations. We propose DUET, a token-selective on-policy distillation method for prohibition compliance. DUET pairs a teacher that sees the prohibition (positive) with an identical-weight teacher that does not (negative). Because the two teachers differ only in prohibition visibility, their per-token disagreement isolates the prohibition's causal effect--yielding a clean supervision signal uncontaminated by model capacity or mismatch. This disagreement drives two complementary mechanisms: signal cleaning, which discards agreement tokens as redundant or prefix-corrupted, and preference-directed learning, which pushes the student away from the negative teacher and toward the positive one at token granularity, embedding DPO-style optimization directly into OPD without offline preference data. We construct an industrial Prohibition-Compliance benchmark spanning five task families covering explicit-refusal, paraphrase robustness, and over-refusal. Across 1.5B-8B Qwen variants, DUET achieves 72.3-85.2% violation compliance while preserving 88-93% normal utility, dramatically outperforming teacher model and other distillation baselines. External evaluation on SysBench confirms improved safety alignment with minimal degradation on GSM8K and MATH-500.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 13 of its 16 references that are in the map. First posted on arXiv 29 Jul 2026.

Builds on

13 of 16 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal20 Jun

Other references · 12

  1. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  2. 2023Let's Verify Step by Stepcited by 3,789
  3. 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
  4. 2020Learning to summarize from human feedbackcited by 2,588
  5. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  6. 2026TIP: Token Importance in On-Policy Distillationcited by 104
  7. 2025DistiLLM-2: A Contrastive Approach Boosts the Distillation of LLMscited by 84
  8. 2024FOFO: A Benchmark to Evaluate LLMs' Format-Following Capabilitycited by 80
  9. 2026SCOPE: Signal-Calibrated On-Policy Distillation Enhancement with Dual-Path Adaptive Weightingcited by 43
  10. 2025AlignDistil: Token-Level Language Model Alignment as Adaptive Policy Distillationcited by 17
  11. 2026Rethinking Reward Supervision: Rubric-Conditioned Self-Distillationcited by 13
  12. 2025SpecEval: Evaluating Model Adherence to Behavior Specificationscited by 9

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026Not All Disagreement Is Learnable: Token Teachability in On-Policy Distillation
  2. 2026Revisiting On-Policy Distillation: Empirical Failure Modes and Simple Fixes
  3. 2026Mismatch Matters: On-Policy Distillation Beyond Token Agreement
  4. 2026Unmasking On-Policy Distillation: Where It Helps, Where It Hurts, and Why
  5. 2026Escaping the KL Agreement Trap in On-Policy Distillation
  6. 2025ORPO-Distill: Mixed-Policy Preference Optimization for Cross-Architecture LLM Distillation
  7. 2026SG-OPD: Sign-Gated On-Policy Distillation via Sign-Consistency Gating and Phased Teacher Sampling
  8. 2026Token Utility for On-Policy Distillation via Local Trust-Region Optimization