Translation in progress Some entries still include text in the original language.
Oct 12 · Monday
Another 232 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
揭示推理加深引发的对齐坍塌，用 Reasoning Trap 放大越狱
Published Sep 8
Evaluated models Qwen3-8B , Qwen3-14B , Llama2-7B and others8 Abstract 更深推理提升题目准确率，同时提高扰动下的相对损失。作者研究扩展推理是否以对齐稳健性为代价，提出 ALR、RT 与 RRA。 。
提出 AV-SafetyBench 评测文生音视频模型的不安全生成
Published Sep 7
Evaluated models LTX-2.3 , Ovi-1.1 , JavisDiT++ and others7 Abstract AV-SafetyBench 用三视角评五个 T2AV 模型，显示只看视频会漏掉音频与联合风险。AV-SafetyBench 是面向文本生成音视频（T2AV）的安全基准：一条提示词同时规定画面和音频，评测同时看两轨以及它们的交互。作者要测的是，不安全含义不只出现在画面上：它可以主要由语音或声音承载，也可以只有两轨合起来才成立。T2VSafetyBench 不评音频，TTA-Bench 不评与画面的交互，作者认为二者都盖不住这些路径。
提出 INTENT-AS-A-TOOL，用意图工具概率跟踪并干预智能体失准
Published Aug 28
Evaluated models Gemma-4-31B-IT , Qwen3.5-27B , Qwen3-235B-A22B and others5 Abstract 用意图工具的下一动作概率跟踪推理中的失准承诺，并在其成为首选时插入反思。Zhang 等人研究推理型语言模型在职场邮件沙箱里如何走向智能体失准，并提出用动作偏好而不是事后文本标签来跟踪承诺。问题是：有害执行往往出现在推理已经形成意图之后，但 CoT 监控是事后、粗粒度、依赖外部评审的，也看不到模型倾向调用哪个动作。
提出价值泄漏评估，测量模型回答受自身价值倾向的隐蔽影响
Published Jul 16
Evaluated models Claude Opus 4.8 , Claude Opus 4.7 , Claude Opus 4.6 and others15 Abstract 论文揭示前沿模型回答常受自身价值隐蔽塑造，提出反事实评估量化偏见及其思维链隐瞒，指出当前对齐未能有效防范该失效。
提出 SafeReAct，用 LoRA 重激活后训练模型被掩盖的安全机制
Published Mar 10
Evaluated models DeepSeek-R1-distilled LLaMA-8B , DeepSeek-R1-distilled Qwen-7B , DeepSeek-R1-distilled Qwen-14B and others9 Abstract SafeReAct 用剪枝得到的安全表示做 LoRA 对齐，以恢复后训练模型被掩盖的拒绝行为。这篇工作针对后训练 LLM 的安全下降，提出表示对齐方法SafeReAct 。
分析推理模型拒答假新闻时思维链的内部安全分叉
Published Feb 5
Evaluated models Llama3-8B , Qwen3-4B , Qwen3-8B and others5 Abstract 拒绝不等于过程安全。作者对推理 LLM 在虚假新闻生成中的 CoT 做内部路由分析，并只改关键头来降低过程风险。作者称这是该场景下不安全 CoT 的首次系统分析。
You have reached the end