Papers

Beacon 框架改进 GRPO 安全对齐,安全错误率降低 32.83 个百分点

Rethinking GRPO for Large Reasoning Model Safety Alignment

Why we picked it

这篇论文解释了为什么 GRPO 做安全对齐会失效,还给出了 Beacon 框架,在 Qwen3 和 DeepSeek-R1-Distill 上把安全错误最多降了 32.83 个百分点。

arXiv 论文指出 GRPO 用于大推理模型安全对齐时存在两个失败模式:同质 rollout 导致的优势塌缩,以及不安全行为的多样化扩散。作者提出 Beacon 框架,包含 SSR(优势引导轨迹过滤加安全参考监督)和 SUDA(类别感知奖励加仅良性样本的 KL 锚定)两个模块。在 Qwen3 和 DeepSeek-R1-Distill 的四个变体、八个基准上测试,平均安全错误最多降低 32.83 个百分点,同时保持低过度拒答率。

Original · arXiv: DeepSeek

Rethinking GRPO for Large Reasoning Model Safety Alignment

Large reasoning models (LRMs) exhibit strong reasoning capabilities but remain vulnerable to unsafe outputs. While Group Relative Policy Optimization (GRPO) is widely used for safety alignment, its group-relative optimization may provide insufficient safety-directed learning signals. In this paper, we identify two failure modes: advantage collapse, where homogeneous rollout groups yield vanishing advantages, and unsafe diversification, where unsafe behaviors persist and become increasingly diverse. Our theoretical analysis reveals that behavioral consistency weakens within-group safety contrasts, while entropy regularization can diversify unsafe responses when relative signals vanish. To address these challenges, we propose Beacon, comprising Safety Signal Recovery (SSR) and Safety-Utility Decoupled Alignment (SUDA). SSR combines advantage-guided trajectory filtering and safe reference supervision to recover effective safety learning signals, while SUDA employs category-aware rewards and benign-only KL anchoring to mitigate over-refusal without compromising safety. Experiments across four Qwen3 and DeepSeek-R1-Distill variants and eight benchmarks show that our framework achieves the best average safety and reasoning performance, reducing average safety error by up to 32.83 percentage points while maintaining low over-refusal.