Training Alignment Auditors via Reinforcement Learning
Not on the map. Why?
Abstract (arXiv)
Alignment auditing of frontier models increasingly relies on LLM auditors to surface undesirable behaviors at scale, but current automated auditors can struggle with coherent investigation and audit realism. In this work, we improve LLM auditors with reinforcement learning. In our best training environment, the policy investigates target models that potentially possess hidden behaviors planted via their system prompt. An LLM judge, which knows whether the target has a hidden behavior, holistically compares the policy's investigation to a reference investigation to determine the reward. With systematic ablations, we find that pairwise rewards yield more robust training compared to pointwise rewards, and that adding targets without planted behaviors helps maintain a low false positive rate. Training improves investigation quality against targets with planted behaviors, the rate of concerning behaviors surfaced in unmodified production models, and audit realism, while false-positive rates stay below 1%. Furthermore, auditing capabilities generalize across scaffolds: performance on AuditBench's adversarially fine-tuned targets substantially improves [Sheshadri et al., 2026].
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 20 of its 47 references that are in the map. First posted on arXiv 26 Aug 2026.
Builds on
20 of 47 references.
References · 20
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2017Deep reinforcement learning from human preferencescited by 3,912
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2025Gemma 3 Technical Reportcited by 1,824
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2024DeepSeek-V3 Technical Reportcited by 811
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 629
- 2024Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Trainingcited by 529
- 2024Alignment faking in large language modelscited by 360
8 more
- 2024Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Promptscited by 205
- 2025Auditing language models for hidden objectivescited by 83
- 2024Clio: Privacy-Preserving Insights into Real-World AI Usecited by 72
- 2026AuditBench: Evaluating Alignment Auditing Techniques on Models with Hidden Behaviorscited by 38
- 2024Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learningcited by 25
- 2025Eliciting Language Model Behaviors with Investigator Agentscited by 23
- 2025Auditing Games for Sandbaggingcited by 14
- 2025Hermes 4 Technical Reportcited by 8
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025The Alignment Auditor: A Bayesian Framework for Verifying and Refining LLM Objectives
- 2026Behavioral Canaries: Auditing Private Retrieved Context Usage in RL Fine-Tuning
- 2025Auditing Data Membership in Reinforcement Learning With Verifiable Rewards
- 2026Alignment via Training Against Probes Without Losing Monitorability
- 2025CALM: Curiosity-Driven Auditing for Large Language Models
- 2026Reinforcement Learning Towards Broadly and Persistently Beneficial Models
- 2026Audit tools of the trade: Automated Auditor Elicitation Can Be Sensitive to the Context the Auditor Is Given
- 2026AUDITPLAN: Commit, Then Answer for Auditable Safety Alignment