mlsanityData to 14 Oct 2026

Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures

arXiv 2609.29429 ↗First posted 24 Sep 2026cs.AI cs.CL cs.CRcited by 8

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Detectors of alignment failures screen deployed language models and score alignment benchmarks. Most are generative judges that spend a decoding pass on every criterion, and classifiers that read token probabilities, such as Llama Guard, still score one fixed label per call. Jev, a model trained with reinforcement learning for calibrated decisions (RLCD), answers many typed questions about one input with calibrated probabilities in a single call. Whether it detects alignment failures has not been measured. We present RLCDAlignBench, which benchmarks Jev on ten alignment failures: sycophancy, jailbreaks, deception, prompt injection, hallucination, privacy violation, social bias, reward hacking, concealing uncertainty, and power seeking. It spans 44 benchmarks and five target models, labelled by each benchmark's scorer and, on two, by humans. Many of these failures are relational, defined against a reference, such as the user's belief or an injected instruction, that the response alone does not reveal. Our key idea is therefore to vary what Jev is asked separately from what it sees: the question's wording and answer type on one side, the fields of the input on the other. A single generic question reaches a median AUROC of 0.886 zero-shot and beats supervised baselines on most benchmarks. Question wording matters little, while context matters more, mostly through fields that encode the label. Jev matches the reference scorer's agreement with human labels, surfaces label defects in existing benchmarks, and costs 63x less than LLM-judge scorers. Code and data: https://github.com/sumleo/RLCDAlignBench.

Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 65 of its 86 references that are in the map. First posted on arXiv 24 Sep 2026.

Builds on

65 of 86 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun

Other references · 64

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2025Qwen3 Technical Reportcited by 8,820
  4. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  5. 2017On Calibration of Modern Neural Networkscited by 4,960
  6. 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,276
  7. 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
  8. 2022Language Models (Mostly) Know What They Knowcited by 1,856
  9. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  10. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  11. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  12. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
38 more
  1. 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
  2. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  3. 2023Large Language Models are not Fair Evaluatorscited by 1,085
  4. 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
  5. 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 974
  6. 2017Selective Classification for Deep Neural Networkscited by 852
  7. 2023Just Ask for Calibration: Strategies for Eliciting Calibrated Confidence Scores from Language Models Fine-Tuned with Human Feedbackcited by 812
  8. 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 810
  9. 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 767
  10. 2017Crowdsourcing Multiple Choice Science Questionscited by 765
  11. 2022Teaching Models to Express Their Uncertainty in Wordscited by 751
  12. 2018Gender Bias in Coreference Resolution: Evaluation and Debiasing Methodscited by 659
  13. 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 538
  14. 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
  15. 2025Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAscited by 521
  16. 2024RewardBench: Evaluating Reward Models for Language Modelingcited by 499
  17. 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 446
  18. 2019Confident Learning: Estimating Uncertainty in Dataset Labelscited by 413
  19. 2021Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarkscited by 395
  20. 2024Justice or Prejudice? Quantifying Biases in LLM-as-a-Judgecited by 368
  21. 2023JudgeLM: Fine-tuned Large Language Models are Scalable Judgescited by 367
  22. 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 364
  23. 2024JudgeBench: A Benchmark for Evaluating LLM-based Judgescited by 318
  24. 2019Verified Uncertainty Calibrationcited by 309
  25. 2023RAGTruth: A Hallucination Corpus for Developing Trustworthy Retrieval-Augmented Language Modelscited by 283
  26. 2024MiniCheck: Efficient Fact-Checking of LLMs on Grounding Documentscited by 257
  27. 2025Chain of Thought Monitorability: A New and Fragile Opportunity for AI Safetycited by 249
  28. 2024LLMs instead of Human Judges? A Large Scale Empirical Study across 20 NLP Evaluation Taskscited by 243
  29. 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 243
  30. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
  31. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
  32. 2023AI Control: Improving Safety Despite Intentional Subversioncited by 229
  33. 2024Judging the Judges: Evaluating Alignment and Vulnerabilities in LLMs-as-Judgescited by 205
  34. 2023"Kelly is a Warm Person, Joseph is a Role Model": Gender Biases in LLM-Generated Reference Letterscited by 199
  35. 2023Do the Rewards Justify the Means? Measuring Trade-Offs Between Rewards and Ethical Behavior in the MACHIAVELLI Benchmarkcited by 182
  36. 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 178
  37. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
  38. 2023Tensor Trust: Interpretable Prompt Injection Attacks from an Online Gamecited by 145

50 most cited of 64 All 64 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 8.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025The Alignment Auditor: A Bayesian Framework for Verifying and Refining LLM Objectives
  2. 2026R-Align: Enhancing Generative Reward Models through Rationale-Centric Meta-Judging
  3. 2025Agentic Reinforcement Learning for Search Misaligns Instruction-Tuning
  4. 2024AI Alignment through Reinforcement Learning from Human Feedback? Contradictions and Limitations
  5. 2026OpenJev-RLCD: A Working RLCD Implementation
  6. 2026Alignment Risks from Capability-Seeking RL Training
  7. 2025Inverse Reinforcement Learning Meets Large Language Model Post-Training: Basics, Advances, and Opportunities
  8. 2025Position: The Complexity of Perfect AI Alignment -- Formalizing the RLHF Trilemma