arXiv:cs.AI· Mohan Li, Chengyu Yu, Francesco Sovrano, Marc Langheinrich, Martin Gjoreski·· 6 小时前
LLM 对齐中的效用不对称:语义保持变换下对齐泛化研究
LLM Alignment--Utility Asymmetry under Semantic-Preserving Transformations
AI 导读
研究用规则化、可逆的语义保持变换探测 LLM 对齐泛化,在四个开源权重模型和四个商用模型上发现"对齐-效用不对称"现象:模型适应变换输入后任务效用大多保留,对齐失效却急剧上升。例如适配后的 GPT-4.1 mini 有害率从 13.3 升至 74.3,Gemini 3 Flash 从 2.3 升至 43.0。该论文已被 NeurIPS 2026 接收。
正文
Abstract:Large Language Model (LLM) alignment is intended to ensure that models remain helpful and safe, but its stability under input distributional shift is not yet fully understood. Prior work shows that aligned models can fail under jailbreak prompts, alternative encodings, and cross-lingual transfer, yet these failures are usually studied as attacks rather than controlled probes of alignment generalization. Moreover, existing evidence is largely grounded in natural language variation already represented during pretraining, leaving unresolved whether alignment generalizes with semantic content or remains tied to superficial surface patterns. In this paper, we study this question using synthetic semantic-preserving transformations that are rule-based and invertible, preserving task-relevant meaning while shifting inputs beyond standard linguistic variation. Across four open-weight and four commercial models, under both fine-tuning and in-context learning, we use these transformations as a probe of alignment generalization and identify an empirical pattern we term Alignment--utility asymmetry: once models can operate effectively on transformed inputs, task utility is often substantially retained while alignment failure increases more sharply. For example, adapted GPT-4.1 mini shows only limited utility degradation under transformation while its harmful rate rises from 13.3 to 74.3; Gemini 3 Flash similarly retains near-original utility while its harmful rate increases from 2.3 to 43.0. Taken together, these results suggest that semantic-preserving distribution shifts can expose a recurring gap in how utility and alignment generalize in current LLMs.
| Comments: | 58 pages. Accepted at NeurIPS 2026 |
| Subjects: | Computation and Language (cs.CL); Artificial Intelligence (cs.AI) |
| Cite as: | arXiv:2609.32717 [cs.CL] |
| (or arXiv:2609.32717v2 [cs.CL] for this version) | |
| https://doi.org/10.48550/arXiv.2609.32717 arXiv-issued DOI via DataCite |
|
| Journal reference: | 40th Conference on Neural Information Processing Systems (NeurIPS 2026) |
Submission history
From: Mohan Li [view email]
[v1]
Sat, 26 Sep 2026 15:31:46 UTC (816 KB)
[v2]
Tue, 13 Oct 2026 14:38:55 UTC (808 KB)
来源:arXiv:cs.AI · arxiv.org