Automated Researchers Can Mitigate Well-characterized Alignment Failures
Not on the map. Why?
Abstract (arXiv)
Automating alignment research may accelerate progress toward aligned AI, but whether it does is hard to measure. Luckily, many alignment failures, such as deception, sycophancy, and jailbreaks, are already measurable by public benchmarks. We study whether automated alignment researchers (AARs) can post-train to mitigate alignment failures by proposing training methods and data to simultaneously optimize multiple safety benchmarks, while largely preserving general capability. Across 10 alignment failures, the strongest AAR methods significantly reduce the targeted alignment failures and generalize to a held-out benchmark, multi-turn behavioral audits, and models up to 4.7x larger than the target model. As a human baseline, 28 experienced researchers receive up to eight hours to develop one-shot methods for the same benchmarks, but their methods underperform the best AAR methods. Using human ideas as the AARs' initial research direction does not improve performance, suggesting current AARs may not need guidance from experienced researchers. These results suggest that automating alignment research on well-characterized failures may be practical in the near term.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 51 of its 66 references that are in the map. First posted on arXiv 28 Aug 2026.
Builds on
51 of 66 references.
References · 51
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023Instruction-Following Evaluation for Large Language Modelscited by 1,228
- 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,121
- 2024Tulu 3: Pushing Frontiers in Open Language Model Post-Trainingcited by 1,053
- 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
38 more
- 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 974
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023Enhancing Chat Language Models by Scaling High-quality Instructional Conversationscited by 839
- 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 538
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2025Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAscited by 521
- 2024A StrongREJECT for Empty Jailbreakscited by 385
- 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 364
- 2023RAGTruth: A Hallucination Corpus for Developing Trustworthy Retrieval-Augmented Language Modelscited by 283
- 2024MiniCheck: Efficient Fact-Checking of LLMs on Grounding Documentscited by 257
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2023AI Control: Improving Safety Despite Intentional Subversioncited by 229
- 2022Measuring Progress on Scalable Oversight for Large Language Modelscited by 225
- 2023"Kelly is a Warm Person, Joseph is a Role Model": Gender Biases in LLM-Generated Reference Letterscited by 199
- 2023Simple synthetic data reduces sycophancy in large language modelscited by 187
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 182
- 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 178
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
- 2023Tensor Trust: Interpretable Prompt Injection Attacks from an Online Gamecited by 145
- 2025AbstentionBench: Reasoning LLMs Fail on Unanswerable Questionscited by 145
- 2025ELEPHANT: Measuring and understanding social sycophancy in LLMscited by 129
- 2025Olmo 3cited by 129
- 2024Benchmarking LLMs via Uncertainty Quantificationcited by 126
- 2025Measuring Sycophancy of Language Models in Multi-turn Dialoguescited by 104
- 2025The MASK Benchmark: Disentangling Honesty From Accuracy in AI Systemscited by 72
- 2026PostTrainBench: Can LLM Agents Automate LLM Post-Training?cited by 64
- 2025Monitoring Monitorabilitycited by 58
- 2023LLMs as Factual Reasoners: Insights from Existing Benchmarks and Beyondcited by 38
- 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliancecited by 37
- 2025Evaluating the Paperclip Maximizer: Are RL-Based Language Models More Likely to Pursue Instrumental Goals?cited by 33
- 2025Reliable Weak-to-Strong Monitoring of LLM Agentscited by 31
- 2026Reasoning Models Struggle to Control their Chains of Thoughtcited by 25
- 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarioscited by 19
- 2025Predicting Empirical AI Research Outcomes with Language Modelscited by 17
- 2025Consistency Training Helps Stop Sycophancy and Jailbreakscited by 16
- 2026Estimating Tail Risks in Language Model Output Distributionscited by 9
- 2026Auditing Sabotage Bench: A Benchmark for Detecting and Fixing Research Sabotage in ML Codebasescited by 4
- 2026Automated alignment is harder than you thinkcited by 2
50 most cited of 51 All 51 (JSON)
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failurescited by 8
- 2026Evolutionary Safety of Recursive Self-Improving AI: Taxonomy, Risk Discovery, and Evaluationcited by 0
- 2026Which Self-Improvements Should We Trust? Reliable Self-Improvement When Agents Reuse Their Benchmarkscited by 0
- 2026ConflictGuide: AutoResearch Improves When Competing Behaviors Are Made Visiblecited by 0
- 2026SIGMA: Self-Improving Alignment Generalization from a Model Speccited by 0
- 2026SIGMA: Self-Improving Alignment Generalization from a Model Spec6 Oct 2026
- 2026ConflictGuide: AutoResearch Improves When Competing Behaviors Are Made Visible30 Sep 2026
- 2026Which Self-Improvements Should We Trust? Reliable Self-Improvement When Agents Reuse Their Benchmarks27 Sep 2026
- 2026Evolutionary Safety of Recursive Self-Improving AI: Taxonomy, Risk Discovery, and Evaluation25 Sep 2026
- 2026Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures24 Sep 2026
Similar, not cited
Close in wording, no citation either way
- 2025Towards Integrated Alignment
- 2026AI Alignment Breaks at the Edge
- 2024On the Essence and Prospect: An Investigation of Alignment Approaches for Big Models
- 2024Challenges and Future Directions of Data-Centric AI Alignment
- 2025The Differences Between Direct Alignment Algorithms are a Blur
- 2025PIKA: Expert-Level Synthetic Datasets for Post-Training Alignment from Scratch
- 2026Constitutional adapters: Inference-time interventions for misalignment and misuse
- 2024Aligning Model Properties via Conformal Risk Control