DiagSafe: prompt-level rubrics for diagnosing LLM safety
Start here
In October 2026, researchers proposed the DiagSafe diagnostic evaluation framework, which replaces binary safe/unsafe labels with prompt-level rubrics based on globally applicable AI safety policies, giving explicit criteria along the two dimensions of safety and helpfulness. The accompanying Chinese-English bilingual benchmark is based on an 84-category safety taxonomy and includes DiagBase, covering single-turn and multi-turn directly harmful queries and templated jailbreaks, and DiagAttack, which embeds harmful intent into complex instruction-following tasks.
Generated by AI from reports · Updated 22 days ago
Attention and developments
Attention, hourly
Now 33, 0% in 24 hours·Peak 33 (Nov 6 03:00)
Related research
This event's paper
- Beyond Binary Labels: Diagnostic Evaluation of LLM Safety with Prompt-Level Rubrics
arXiv · 2026-10-21 · Deep reading
Progress timeline
- XiaohongshuXiaohongshu · AI Security Heart· DiscussionLLM safety diagnostic evaluation based on prompt-level scoring criteria(opens the original post in a new tab)
- arXiv: Alignment, Deception & OversightBeyond Binary Labels: Prompt-Level Rubric-Based Diagnostic Evaluation of LLM Safety
The researchers propose DiagSafe, a diagnostic evaluation framework that replaces binary safe/unsafe labels with prompt-level rubrics to evaluate LLM safety; the rubrics are based on globally applicable AI safety policies and give explicit criteria along two dimensions: safety (targeting specific harms and setting exemptions to suppress false positives) and helpfulness (independently assessing instruction completion). The accompanying benchmark is bilingual in Chinese and English, based on a taxonomy of 84 safety categories, and contains two subsets: DiagBase covers single-turn and multi-turn directly harmful queries and templated jailbreaks, and DiagAttack embeds harmful intent into complex instruction-following tasks to form instruction attacks. Experiments show that the framework achieves 95.34% agreement between LLM-as-a-judge and human annotation, higher than the 69%-87% of baseline methods, with an inter-judge Cohen's κ of 0.864. Applying the framework also finds that mainstream LLMs differ markedly in unsafe rates, that each model has unique weaknesses across different dimensions, and that they are especially susceptible in Chinese and multi-turn scenarios.
Related discussion
- Older than 72 hours · Not included in the 72-hour figures
- XiaohongshuXiaohongshu · AI Security HeartLLM safety diagnostic evaluation based on prompt-level scoring criteria(opens the original post in a new tab)