Learning What to Fail On: Failure-Mode Contextual Bandits for Adversarial Data Curation
On the map: Retrieval-augmented generation → Privacy and security of RAG
Abstract (arXiv)
We introduce a failure-aware adversarial retrieval-augmented framework for improving robustness in natural language understanding. Rather than selecting synthetic examples with a fixed reward threshold, our method formulates adversarial data curation as a failure-mode contextual bandit problem. Candidate examples are generated with retrieval-augmented prompting, filtered by the current target model, automatically validated by an LLM judge ensemble, and clustered into recurring failure modes. A stochastic policy then selects which failure modes to sample for retraining, and is updated using validation-based reward that balances robustness gains, forgetting, and data cost. This makes the data curator itself the learning agent, enabling adaptive selection of the most useful model failures across training rounds. On standard benchmarks, our approach improves RoBERTa-base accuracy from 88.48% to 92.60% on SNLI, from 75.04% to 80.95% on ANLI, and from 54.67% to 71.99% on MultiNLI, while consistently outperforming prior adversarial augmentation methods. We further demonstrate transfer to FEVER fact verification, achieving up to 79.86% FEVER score and 82.45% accuracy with RoBERTa-large. Finally, we provide a theoretical interpretation showing that, under stated assumptions, failure-mode sampling can reduce shortcut-aligned gradient contributions while inducing bounded distributional drift. By combining retrieval, automated validation, contextual-bandit failure selection, and controlled adversarial retraining, our framework enables scalable robustness improvement without additional human annotation.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Privacy and security of RAG, one of 15 directions in Retrieval-augmented generation. Builds on 24 of its 35 references that are in the map. First posted on arXiv 19 Aug 2026.
Builds on
24 of 35 references.
Closest ancestors · 1
Same direction, newest first
Other references · 23
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,682
- 2015A large annotated corpus for learning natural language inferencecited by 1,847
- 2024M3-Embedding: Multi-Linguality, Multi-Functionality, Multi-Granularity Text Embeddings Through Self-Knowledge Distillationcited by 1,073
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
- 2025SmolLM2: When Smol Goes Big -- Data-Centric Training of a Small Language Modelcited by 335
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
- 2018Breaking NLI Systems with Sentences that Require Simple Lexical Inferencescited by 134
- 2019Fine-grained Fact Verification with Kernel Graph Attention Networkcited by 105
- 2019GEAR: Graph-based Evidence Aggregating and Reasoning for Fact Verificationcited by 100
- 2018Adversarially Regularising Neural NLI Models to Integrate Logical Background Knowledgecited by 46
- 2023Prompting Large Language Models for Counterfactual Generation: An Empirical Studycited by 37
11 more
- 2017Learning What Data to Learncited by 21
- 2020Reinforced Curriculum Learning on Pre-trained Neural Machine Translation Modelscited by 20
- 2018Behavior Analysis of NLI Models: Uncovering the Influence of Three Factors on Robustnesscited by 17
- 2024A synthetic data approach for domain generalization of NLI modelscited by 15
- 2023BEVERS: A General, Simple, and Performant Framework for Automatic Fact Verificationcited by 11
- 2025Don't Lag, RAG: Training-Free Adversarial Detection Using RAGcited by 5
- 2025RL-Selector: Reinforcement Learning-Guided Data Selection via Redundancy Assessmentcited by 3
- 2021Extracting and filtering paraphrases by bridging natural language inference and paraphrasingcited by 2
- 2024Enhancing Object Detection Robustness: Detecting and Restoring Confidence in the Presence of Adversarial Patch Attackscited by 2
- 2025Seeing Isn't Believing: Context-Aware Adversarial Patch Synthesis via Conditional GANcited by 2
- 2025RL-Guided Data Selection for Language Model Finetuningcited by 2
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Unifying Adversarial Robustness and Training Across Text Scoring Models
- 2025AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research
- 2024Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Models
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts
- 2025Tougher Text, Smarter Models: Raising the Bar for Adversarial Defence Benchmarks
- 2023Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models
- 2024Evaluating and Safeguarding the Adversarial Robustness of Retrieval-Based In-Context Learning