Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Detectors of alignment failures screen deployed language models and score alignment benchmarks. Most are generative judges that spend a decoding pass on every criterion, and classifiers that read token probabilities, such as Llama Guard, still score one fixed label per call. Jev, a model trained with reinforcement learning for calibrated decisions (RLCD), answers many typed questions about one input with calibrated probabilities in a single call. Whether it detects alignment failures has not been measured. We present RLCDAlignBench, which benchmarks Jev on ten alignment failures: sycophancy, jailbreaks, deception, prompt injection, hallucination, privacy violation, social bias, reward hacking, concealing uncertainty, and power seeking. It spans 44 benchmarks and five target models, labelled by each benchmark's scorer and, on two, by humans. Many of these failures are relational, defined against a reference, such as the user's belief or an injected instruction, that the response alone does not reveal. Our key idea is therefore to vary what Jev is asked separately from what it sees: the question's wording and answer type on one side, the fields of the input on the other. A single generic question reaches a median AUROC of 0.886 zero-shot and beats supervised baselines on most benchmarks. Question wording matters little, while context matters more, mostly through fields that encode the label. Jev matches the reference scorer's agreement with human labels, surfaces label defects in existing benchmarks, and costs 63x less than LLM-judge scorers. Code and data: https://github.com/sumleo/RLCDAlignBench.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 65 of its 86 references that are in the map. First posted on arXiv 24 Sep 2026.
Builds on
65 of 86 references.
Closest ancestors · 1
Same direction, newest first
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
Other references · 64
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2025Qwen3 Technical Reportcited by 8,820
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,276
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2022Language Models (Mostly) Know What They Knowcited by 1,856
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
38 more
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023Large Language Models are not Fair Evaluatorscited by 1,085
- 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
- 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 974
- 2017Selective Classification for Deep Neural Networkscited by 852
- 2023Just Ask for Calibration: Strategies for Eliciting Calibrated Confidence Scores from Language Models Fine-Tuned with Human Feedbackcited by 812
- 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 810
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 767
- 2017Crowdsourcing Multiple Choice Science Questionscited by 765
- 2022Teaching Models to Express Their Uncertainty in Wordscited by 751
- 2018Gender Bias in Coreference Resolution: Evaluation and Debiasing Methodscited by 659
- 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 538
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2025Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAscited by 521
- 2024RewardBench: Evaluating Reward Models for Language Modelingcited by 499
- 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 446
- 2019Confident Learning: Estimating Uncertainty in Dataset Labelscited by 413
- 2021Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarkscited by 395
- 2024Justice or Prejudice? Quantifying Biases in LLM-as-a-Judgecited by 368
- 2023JudgeLM: Fine-tuned Large Language Models are Scalable Judgescited by 367
- 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 364
- 2024JudgeBench: A Benchmark for Evaluating LLM-based Judgescited by 318
- 2019Verified Uncertainty Calibrationcited by 309
- 2023RAGTruth: A Hallucination Corpus for Developing Trustworthy Retrieval-Augmented Language Modelscited by 283
- 2024MiniCheck: Efficient Fact-Checking of LLMs on Grounding Documentscited by 257
- 2025Chain of Thought Monitorability: A New and Fragile Opportunity for AI Safetycited by 249
- 2024LLMs instead of Human Judges? A Large Scale Empirical Study across 20 NLP Evaluation Taskscited by 243
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 243
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2023AI Control: Improving Safety Despite Intentional Subversioncited by 229
- 2024Judging the Judges: Evaluating Alignment and Vulnerabilities in LLMs-as-Judgescited by 205
- 2023"Kelly is a Warm Person, Joseph is a Role Model": Gender Biases in LLM-Generated Reference Letterscited by 199
- 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 182
- 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 178
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
- 2023Tensor Trust: Interpretable Prompt Injection Attacks from an Online Gamecited by 145
50 most cited of 64 All 64 (JSON)
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Modelscited by 10
- 2026Typed Decision Models: An Early Evidence Audit and Evaluation Checklistcited by 3
- 2026Probability Contracts: Accuracy, Coherence, and Decisions Across LLM Interfacescited by 3
- 2026Evaluating System One Models for Agent Security Decisions: Reliability, Calibration, and Selective Automationcited by 0
- 2026Readout Stability in Prefill-Only Decision Models:Zero-Label Prediction and Inference-Time Compute Allocationcited by 0
- 2026The Company a Question Keeps: Auditing Open Jev-Style Models for Retrievalcited by 0
- 2026Same Attack, Different Judge: A First Controlled Adversarial Comparison of Jev, LLM Judges, and Purpose-Built Safety Classifierscited by 0
- 2026Are AI Decision Models Biased? A Case Study of Jevcited by 0
- 2026Are AI Decision Models Biased? A Case Study of Jev14 Oct 2026
- 2026Same Attack, Different Judge: A First Controlled Adversarial Comparison of Jev, LLM Judges, and Purpose-Built Safety Classifiers13 Oct 2026
- 2026The Company a Question Keeps: Auditing Open Jev-Style Models for Retrieval10 Oct 2026
- 2026Readout Stability in Prefill-Only Decision Models:Zero-Label Prediction and Inference-Time Compute Allocation6 Oct 2026
- 2026Probability Contracts: Accuracy, Coherence, and Decisions Across LLM Interfaces27 Sep 2026
- 2026Evaluating System One Models for Agent Security Decisions: Reliability, Calibration, and Selective Automation27 Sep 2026
- 2026Typed Decision Models: An Early Evidence Audit and Evaluation Checklist26 Sep 2026
- 2026JevAdvBench: A Benchmark and Black-Box Attacks for Reinforcement Learning for Calibrated Decisions Models25 Sep 2026
Similar, not cited
Close in wording, no citation either way
- 2025The Alignment Auditor: A Bayesian Framework for Verifying and Refining LLM Objectives
- 2026R-Align: Enhancing Generative Reward Models through Rationale-Centric Meta-Judging
- 2025Agentic Reinforcement Learning for Search Misaligns Instruction-Tuning
- 2024AI Alignment through Reinforcement Learning from Human Feedback? Contradictions and Limitations
- 2026OpenJev-RLCD: A Working RLCD Implementation
- 2026Alignment Risks from Capability-Seeking RL Training
- 2025Inverse Reinforcement Learning Meets Large Language Model Post-Training: Basics, Advances, and Opportunities
- 2025Position: The Complexity of Perfect AI Alignment -- Formalizing the RLHF Trilemma