AI safety and alignment

Alignment, interpretability, red-teaming, bias and privacy: the research on what these systems do when they misbehave.

17,638 stories · RSS feed

arXiv Computer Vision
1d ago

DreamRealm: Exploring and Materializing Hallucination Worlds for Trustworthy Vision-Language Models

arXiv:2611.06433v1 Announce Type: new Abstract: Multimodal large language models (MLLMs) remain prone to visual hallucinations when correct responses depend on subtle visual details. One line of post...

By Benlei Cui, Chunyang Chai, Yiliang Zhang, Xiaoqian Xia, Chengwen Yao, Song Li, Longtao Huang, Yuwen Zhai, Haiwen Hong
arXiv Computer Vision
1d ago

RegimeVGGT: Layer-Wise Spatially Preserving Redundancy Removal for Visual Geometry Grounded Transformer

arXiv:2606.18439v2 Announce Type: replace Abstract: Visual Geometry Grounded Transformer (VGGT) recovers dense 3D scene structure from multi-view images in one forward pass, but quadratic cross-frame...

By Jinhao You (University of Pennsylvania), Shuo Lyu (University of Pennsylvania), Zhuohang Lyu (University of Pennsylvania), Tanxuan Li (University of Pennsylvania), Zibo Zhao (University of Pennsylvania), Jiaxiang Hu (University of California, Irvine), Kai Tang (Nanyang Technological University), Yichen Guo (Nanyang Technological University)
arXiv AI
1d ago

EmoReward: Self-Evolving Reward Calibration for Emotional Video Generation RL

EmoReward is a self‑evolving reward calibration framework for emotional video generation using reinforcement learning. It distills reliability from reward traces during training to adaptively weight multiple reward primitives—such as visual quality, motion, and text alignment—based on emotional evidence. The method employs grounding cues, heterogeneous signal primitives, reflective reward gating, and a RewardMemory module to calibrate fusion weights across training runs, demonstrating improvements on HunyuanVideo 1.5 and transferability to SD 3.5 and FLUX.

By Mingzhe Zheng, Yue Wu, Jing Tan, Chang Zou, Dengyang Jiang, Zeyue Tian, Xuanhua He, Ryan Xu, Yunyang Ge, Sihui Ji, Yunlong Lin, Kaihang Pan, Hongru Yan, Sixiang Chen, Dianyi Wang, Julian Zhang, Weijie Kong, Changlin Li, Lanqing Guo, Zhao Zhong, Qifeng Chen, Harry Yang
arXiv AI
1d ago

Aligning Training and Rollout Policies for End-to-End FP4 RL on Mixture-of-Experts LLMs

The paper investigates end‑to‑end FP4 reinforcement learning for Mixture‑of‑Experts large language models and finds that existing recovery techniques for dense models fail to improve accuracy in the MoE setting. The authors attribute this to the discrete routing decisions in MoE, which make training‑inference policy alignment highly sensitive to asymmetry in recovery methods. They introduce MoEResQ, a symmetric quantization‑recovery recipe that restores alignment and significantly narrows the accuracy gap to full precision.

By Hei Yi Mak, Hoang Le, Mehran Taghian Jazi, Yunke Peng, Huan Lin, Zhengzhi Tang, Zhexu Liu, Yao Wang, Yaoyuan Wang, Anandharaju Durai Raju, Tanzila Rahman
arXiv Machine Learning
1d ago

The Alignment Tax Is Graded: Task-Selective Capability Loss Under Length-Normalized DPO with SFT Retention

The study empirically investigates how length‑normalized Direct Preference Optimization (DPO) with a Structured Fine‑Tuning (SFT) retention term (RPO objective) affects downstream capabilities of a Qwen3.5‑4B model fine‑tuned with sparse LoRA on structured financial‑filing tasks. Results show that the alignment tax is graded and task‑selective: extraction performance is largely preserved, JSON extraction degrades modestly, and router‑based tasks suffer severe loss, with most degradation attributed to suppression of rejected completions. The analysis uses 8 seeds, artifact‑aware scoring, and TOST equivalence testing to quantify these effects across different reward margins and precision settings.

By Ye Yuan
arXiv Computation and Language
1d ago

CARTBench: Rubric-Based Evaluation of Shopping Advice for Complex and Ambiguous Requests with Timelines

CARTBench is a new benchmark for evaluating large language model shopping assistants on complex, ambiguous requests that involve timelines. It compiles 1,603 timestamped dialogues from 17 retail domains and pairs them with product records, then uses case‑specific rubrics based on Ideal Response Principles to score responses across Core, Excellence, and Safety criteria. In a full‑suite evaluation of ten commercial APIs and several open‑weight models, only three models scored above 90% on Core and none surpassed 45% on Excellence, revealing a gap between required behavior and high‑quality purchase advice.

By Yuqin Dai, Zhanwei Zhang, Honghui Yang, Zhouheng Yao, Yueqi Zhang, Jingyu He, Chaoyang Shi, Fanding Wei, Boyuan Pan, Kai Xu, Yao Hu, Yongliang Shen
arXiv Computation and Language
1d ago

LITMUS: Benchmarking Behavioral Jailbreaks of LLM Agents in Real OS Environments

LITMUS is a benchmark for testing the safety of large language model agents in real operating system environments, focusing on behavior jailbreaks that can cause irreversible OS-level harm. It includes 819 high-risk test cases organized into a harmful seed subset and six attack-extended subsets covering jailbreak speaking, skill injection, and entity wrapping, and employs a semantic-physical dual verification mechanism with OS-level state rollback. Evaluation of frontier agents shows that even strong models can execute dangerous operations, exhibit execution hallucination, and are vulnerable to skill injection and entity wrapping attacks.

By Chiyu Zhang, Lu Zhou, Xiaogang Xu, Huiqin Yang, Bendong Jiang, Xiaolei Zhang, Yiran Zhao, Ruyi Chen, Jiafei Wu, Liming Fang, Zhe Liu
arXiv AI
1d ago

Whose Transparency is it Anyway? Understanding Generative AI Transparency Needs and Gaps Across Stakeholders

The paper investigates how different stakeholders—end‑users, AI builders, and policymakers—define and experience transparency in generative AI. It finds that while all groups agree on core goals of accuracy and privacy, end‑users perceive larger gaps between desired and available transparency features, with only 28% feeling well served compared to 53% of builders and 49% of policymakers. The study also shows that transparency is context‑dependent, shifting priorities based on task and role, and calls for pluralistic transparency infrastructures rather than a one‑size‑fits‑all approach.

By Genevieve Smith, Sahiba Chopra, Natalia Luka, Min Kyung Lee
arXiv AI
1d ago

MA-SafeDiffuser: Safe Multi-Agent Planning with Diffusion Probabilistic Models

MA‑SafeDiffuser is a multi‑agent extension of SafeDiffuser that incorporates diffusion‑based trajectory planners with finite‑time diffusion invariance guarantees for joint‑agent safety specifications. It formalizes joint safe sets as intersections of per‑agent and pairwise barrier sets, and derives both centralized and decentralized constrained denoising procedures that maintain invariance under mild assumptions. The approach also tackles local‑trap and deadlock issues using time‑varying specifications and liveness CBFs, and introduces a lightweight benchmarking suite including a multi‑agent Maze2D domain, showing reduced violation counts compared to unconstrained diffusion baselines while preserving planning quality.

By Kiran Ravish, Ankita Kushwaha, Preeti, Pawan Kumar
arXiv AI
1d ago

Grounded but Not Immune: Confirmation Bias in Agent-as-a-judge

The paper investigates confirmation bias in Agent-as-a-Judge systems, which evaluate open-ended agent tasks by gathering evidence from the agent’s trajectory. It demonstrates that a single false pre‑screening note can overturn up to 40% of correct verdicts across multiple judges and datasets, even when the judge collects decisive evidence. The authors classify the resulting errors into over‑trust, hallucination, and under‑investigation, noting that over‑trust dominates in larger Claude judges, and show that lightweight mitigations reduce but do not eliminate the bias.

By Drake Benjamin Brown, Khushbu Pahwa, Yubin Ge, Salvatore Romeo, Akhil Agnihotri, Yi Zhang, Xiaofei Ma, Daniele Bonadiman
arXiv AI
1d ago

How Do Artificial Agents Make Decisions in Light of Visual Data?

The paper investigates how vision‑language models (VLMs) perceive uncertainty in visualizations and make decisions based on visual data. Two studies were conducted: one on agents’ ability to quantify uncertainty in charts, and another on their decision‑making when presented with images. Results show GPT‑4o best perceives uncertainty in pie and bar charts, while agents align most closely with rational decision theory when uncertainty is shown via circle charts, icon arrays, or text.

By Keyty Loza, Shayan Monadjemi
arXiv AI
1d ago

Self-Supervised Pretraining for Label-Efficient Facial Expression Recognition using Smart Glasses

The paper presents a self‑supervised pretraining approach for facial expression recognition (FER) using optomyographic (OMG) smart glasses like OCOsense. By pretraining a Vision Transformer with a masked‑autoencoder on unlabelled recordings and fine‑tuning for a five‑class FER task, the authors demonstrate that the pretrained model outperforms a from‑scratch model even when only 5% of the labels are used. The study shows that SSL can substantially reduce labeling costs for smart eyewear FER and suggests benefits for future personalization and continual adaptation.

By Zhengtao Gao, Francesco Bombassei De Bona, Leonardo Alchieri, Ivana Kiprijanovska, Simon Stankoski, Bojan Sofronievski, Hristijan Gjoreski, Marc Langheinrich, Martin Gjoreski
arXiv AI
1d ago

UniCompress: From Multi-LoRA Experts to One Compact Model for Edge Intelligence

UniCompress is a deployment-oriented framework that transforms multi-task vision‑language expertise into a single compact, adapter‑free model suitable for edge intelligence. Starting from a BF16 Qwen3‑VL‑4B teacher, it builds an asymmetric INT2 student using GPTQ initialization and teacher‑guided quantization recovery, jointly compressing both the vision encoder and language backbone. Evaluated on four embodied tasks, UniCompress cuts weight storage from 8.9 GB to 2.1 GB (≈76% reduction) while improving the INT2 macro task score by 34.3 percentage points over GPTQ‑INT2 and staying within 0.9 points of the BF16 teacher.

By Mingkang Liu, Peipei Jiao, Weiming Meng, Tianyuan Liu, Lichen Pang, Junyan Li