mlsanityData to 14 Oct 2026

EOPSA: Efficient On-Policy Self-Distilled Safety Alignment

arXiv 2609.34519 ↗First posted 28 Sep 2026cs.AIcited by 0

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 2 more
Abstract (arXiv)

On-Policy Self-Distillation (OPSD) has emerged as a promising paradigm for safety alignment, delivering dense, token-level supervision by distilling from a teacher conditioned on refusal-oriented privileged prompts. However, we reveal that this paradigm suffers from critical inefficiencies that degrade both training efficiency and general reasoning capabilities. Specifically, we diagnose two fundamental bottlenecks: (1) supervisory collapse over extended rollouts, where the teacher's corrective efficacy degrades precipitously as the student's generation prefix lengthens, injecting noisy gradients into late-stage tokens; and (2) gradient dilution from stylistic shifts, where the distillation objective is dominated by safety-irrelevant stylistic discrepancies induced by privileged prompting, washing out genuine safety signals and impairing base reasoning. To resolve these issues, we propose Efficient On-Policy Self-Distilled Safety Alignment (EOPSA), which concentrates computational and gradient budgets exclusively on reliably supervised, safety-critical tokens. EOPSA incorporates two coordinated mechanisms: (i) Adaptive Rollout Scheduling, which dynamically bounds the generation horizon guided by a novel Teacher Rescue Rate (TRR) metric to operate strictly within reliable supervision regimes; and (ii) Selective Distillation, which filters out safety-neutral tokens to restrict gradient updates exclusively to safety-pivotal transitions. Extensive evaluations across reasoning models up to 32B parameters demonstrate that EOPSA slashes rollout computation by ~50% and backpropagates through merely ~2% of tokens, consistently outperforming full-token distillation baselines in both safety compliance and reasoning retention.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 37 of its 53 references that are in the map. First posted on arXiv 28 Sep 2026.

Builds on

37 of 53 references.

Closest ancestors · 6

Same direction, newest first

  1. 2026Reducing the Safety Tax in LLM Safety Alignment with On-Policy Self-Distillation14 May
  2. 2026THINKSAFE: Self-Generated Safety Alignment for Reasoning Models30 Jan
  3. 2025R1-ACT: Efficient Reasoning Model Safety Alignment by Activating Safety Knowledge1 Aug
  4. 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning20 Jul
  5. 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
  6. 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul

Other references · 31

  1. 2017Proximal Policy Optimization Algorithmscited by 15,215
  2. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  3. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  4. 2025Qwen3 Technical Reportcited by 8,820
  5. 2021Evaluating Large Language Models Trained on Codecited by 8,320
  6. 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
  7. 2023Let's Verify Step by Stepcited by 3,789
  8. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
  9. 2024HybridFlow: A Flexible and Efficient RLHF Frameworkcited by 2,057
  10. 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Codecited by 2,004
  11. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  12. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
19 more
  1. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  2. 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 672
  3. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 629
  4. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  5. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
  6. 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 489
  7. 2026Self-Distilled Reasoner: On-Policy Self-Distillation for Large Language Modelscited by 455
  8. 2024A StrongREJECT for Empty Jailbreakscited by 385
  9. 2025Logic-RL: Unleashing LLM Reasoning with Rule-Based Reinforcement Learningcited by 262
  10. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
  11. 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilitiescited by 136
  12. 2022Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLPcited by 102
  13. 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teamingcited by 98
  14. 2025The Hidden Risks of Large Reasoning Models: A Safety Assessment of R1cited by 91
  15. 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Datacited by 68
  16. 2025Safety in Large Reasoning Models: A Surveycited by 64
  17. 2024Navigating the OverKill in Large Language Modelscited by 44
  18. 2025Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreakingcited by 34
  19. 2025Reasoning as an Adaptive Defense for Safetycited by 23

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Constitutional On-Policy Safe Distillation
  2. 2026Unmasking On-Policy Distillation: Where It Helps, Where It Hurts, and Why
  3. 2026SafeSteer: Localized On-Policy Distillation for Efficient Safety Alignment
  4. 2026Adaptive Supervised Anchoring for On-Policy Self-Distillation
  5. 2026DTDD: Divergence-Triggered Dynamic Distillation for Reliable On-Policy Supervision
  6. 2026Prune-OPD: Efficient and Reliable On-Policy Distillation for Long-Horizon Reasoning
  7. 2026The Many Faces of On-Policy Distillation: Pitfalls, Mechanisms, and Fixes
  8. 2025Self-Guided Adaptive Safety Alignment: Synthesizing and Internalizing Guidelines in Reasoning Models