mlsanityData to 14 Oct 2026

Jailbreaks for Black-Box Uncertainty Quantification in Large Reasoning Models

arXiv 2609.35350 ↗First posted 28 Sep 2026cs.AI cs.CL cs.LGcited by 0

On the map: LLM reasoning → Test-time compute and efficient thinking also fits: Reinforcement learning for reasoning

also in 1 more
Abstract (arXiv)

While Large Reasoning Models (LRMs) excel at complex reasoning, alignment through reinforcement learning often induces systemic overconfidence. In production environments, where logits may be unavailable, robust black-box uncertainty quantification (UQ) is essential for trustworthiness and safety. Focusing on question-answering for LRMs, we show that existing black-box methods, such as paraphrase-based self-consistency and confidence verbalization, offer little to no improvement over simple repeated sampling, suggesting that alignment suppresses useful output variability. We introduce prompt-level relaxation operators that broaden the model's effective output distribution by approximating the effect of an optimal policy obtained with a stronger KL-regularization parameter, hence closer to the reference model. Theoretically, we demonstrate that relaxation improves calibration. We propose Jailbreak for Uncertainty (J4U), a jailbreak-derived technique for UQ that empirically reproduces the behavioral signatures predicted by our relaxation theory. Across 3 datasets and 4 LRMs, including a closed-source production model, J4U's improvement over repeated sampling achieves statistical significance in up to 6 times more LRM-dataset-metric settings than the strongest black-box UQ state-of-the-art baseline we evaluate, with average ECE reductions up to 5 times larger. These results provide a practical tool for UQ in black-box LRM deployment.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Test-time compute and efficient thinking, one of 17 directions in LLM reasoning. Builds on 24 of its 66 references that are in the map. First posted on arXiv 28 Sep 2026.

Builds on

24 of 66 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025gpt-oss-120b & gpt-oss-20b Model Card8 Aug

Other references · 23

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  4. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  5. 2025Qwen3 Technical Reportcited by 8,820
  6. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  7. 2025Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Modelscited by 1,261
  8. 2025Group Sequence Policy Optimizationcited by 835
  9. 2025Humanity's Last Examcited by 491
  10. 2018The Natural Language Decathlon: Multitask Learning as Question Answeringcited by 236
  11. 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 230
  12. 2024On Verbalized Confidence Scores for LLMscited by 83
11 more
  1. 2025Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMscited by 34
  2. 2023Investigating Uncertainty Calibration of Aligned Language Models under the Multiple-Choice Settingcited by 20
  3. 2024Just rephrase it! Uncertainty estimation in closed-source language models via multiple rephrased queriescited by 15
  4. 2024Large Language Model Confidence Estimation via Black-Box Accesscited by 14
  5. 2024Uncertainty is Fragile: Manipulating Uncertainty in Large Language Modelscited by 13
  6. 2025The 2025 Foundation Model Transparency Indexcited by 11
  7. 2025LLMs are Overconfident: Evaluating Confidence Interval Calibration with FermiEvalcited by 8
  8. 2024Calibration Attacks: A Comprehensive Study of Adversarial Attacks on Model Confidencecited by 7
  9. 2025SeSE: Black-Box Uncertainty Quantification for Large Language Models Based on Structural Information Theorycited by 7
  10. 2025Safety Instincts: LLMs Learn to Trust Their Internal Compass for Self-Defensecited by 4
  11. 2025On the Robustness of Verbal Confidence of LLMs in Adversarial Attackscited by 3

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026From Entropy to Calibrated Uncertainty: Training Language Models to Reason About Uncertainty
  2. 2025Reasoning about Uncertainty: Do Reasoning Models Know When They Don't Know?
  3. 2026On the Pitfalls of Verbalized Confidence Priors for Calibrating Large Reasoning Models
  4. 2026Quantifying Faithful Confidence Expression in Large Reasoning Models
  5. 2026Semantic Calibration Prevails Where Token Confidence Fails: Benchmarking Long-Form Scientific QA
  6. 2026Estimating the Black-box LLM Uncertainty with Distribution-Aligned Adversarial Distillation
  7. 2026QuantLRM: Quantization of Large Reasoning Models via Fine-Tuning Signals
  8. 2025Learning the Boundary of Solvability: Aligning LLMs to Detect Unsolvable Problems