paper-with-me

Papers

Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation

2025-03-14 · Bowen Baker, Joost Huizinga, Leo Gao, Zehao Dou, Melody Y. Guan, Aleksander Madry, Wojciech Zaremba, Jakub Pachocki, David Farhi

Mitigating reward hacking--where AI systems misbehave due to flaws or misspecifications in their learning objectives--remains a key challenge in constructing capable and aligned models. We show that we can monitor a frontier reasoning model, such as OpenAI o3-mini, for reward hacking in agentic coding environments by using another LLM that observes the model's chain-of-thought (CoT) reasoning. CoT monitoring can be far more effective than monitoring agent actions and outputs alone, and we further found that a LLM weaker than o3-mini, namely GPT-4o, can effectively monitor a stronger model. Because CoT monitors can be effective at detecting exploits, it is natural to ask whether those exploits can be suppressed by incorporating a CoT monitor directly into the agent's training objective. While we show that integrating CoT monitors into the reinforcement learning reward can indeed produce more capable and more aligned agents in the low optimization regime, we find that with too much optimization, agents learn obfuscated reward hacking, hiding their intent within the CoT while still exhibiting a significant rate of reward hacking. Because it is difficult to tell when CoTs have become obfuscated, it may be necessary to pay a monitorability tax by not applying strong optimization pressures directly to the chain-of-thought, ensuring that CoTs remain monitorable and useful for detecting misaligned behavior.

📄 PDF Abstract BibTeX arXiv:2503.11926

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Training on Documents About Monitoring Leads to CoT Obfuscation

2026-05-14 · Reilly Haskins, Bilal Chughtai, Joshua Engels arxiv

Chain-of-thought (CoT) monitoring is one of the most promising tools we have for detecting model misbehavior, but its effectiveness depends on models faithfully externalizing their reasoning. Motivated by this vulnerabil…

Reinforcement Learning

AutoMonitor-Bench: Evaluating the Reliability of LLM-Based Misbehavior Monitor

2026-01-09 · Shu Yang, Jingyu Hu, Tong Li, Hanqi Yan 외 arxiv

We introduce AutoMonitor-Bench, the first benchmark designed to systematically evaluate the reliability of LLM-based misbehavior monitors across diverse tasks and failure modes. AutoMonitor-Bench consists of 3,010 carefu…

Question AnsweringCode Generation

LLMScan: Causal Scan for LLM Misbehavior Detection

2024-10-22 · Mengdi Zhang, Kai Kiat Goh, Peixin Zhang, Jun Sun 외

Despite the success of Large Language Models (LLMs) across various fields, their potential to generate untruthful, biased and harmful responses poses significant risks, particularly in critical applications. This highlig…

Causal Inference

Investigating CoT Monitorability in Large Reasoning Models

2025-11-11 · Shu Yang, Junchao Wu, Xilin Gong, Xuansheng Wu 외 arxiv

Large Reasoning Models (LRMs) have demonstrated remarkable performance on complex tasks by engaging in extended reasoning before producing final answers. Beyond improving abilities, these detailed reasoning traces also c…

Can Reasoning Models Obfuscate Reasoning? Stress-Testing Chain-of-Thought Monitorability

2025-10-21 · Artur Zolkowski, Wen Xing, David Lindner, Florian Tramèr 외 arxiv

Recent findings suggest that misaligned models may exhibit deceptive behavior, raising concerns about output trustworthiness. Chain-of-thought (CoT) is a promising tool for alignment monitoring: when models articulate th…