Saved in:
Bibliographic Details
Main Authors: Si, Jianfeng, Sun, Lin, Tan, Zhewen, Zhang, Xiangzheng
Format: Preprint
Published: 2025
Subjects:
Online Access:https://arxiv.org/abs/2508.14904
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866912832667254784
author Si, Jianfeng
Sun, Lin
Tan, Zhewen
Zhang, Xiangzheng
author_facet Si, Jianfeng
Sun, Lin
Tan, Zhewen
Zhang, Xiangzheng
contents Current methods for content safety in Large Language Models (LLMs), such as Supervised Fine-Tuning (SFT) and Reinforcement Learning from Human Feedback (RLHF), often rely on multi-stage training pipelines and lack fine-grained, post-deployment controllability. To address these limitations, we propose a unified co-training framework that efficiently integrates multiple safety behaviors: positive (lawful/prosocial), negative (unfiltered/risk-prone) and rejective (refusal-oriented/conservative) within a single SFT stage. Notably, each behavior is dynamically activated via a simple system-level instruction, or magic token, enabling stealthy and efficient behavioral switching at inference time. This flexibility supports diverse deployment scenarios, such as positive for safe user interaction, negative for internal red-teaming, and rejective for context-aware refusals triggered by upstream moderation signals. This co-training strategy induces a distinct Safety Alignment Margin in the output space, characterized by well-separated response distributions corresponding to each safety mode. The existence of this margin provides empirical evidence for the model's safety robustness and enables unprecedented fine-grained control. Experiments show that our method matches the safety alignment quality of SFT+DPO, with our 8B model notably surpassing DeepSeek-R1 (671B) in safety performance, while significantly reducing both training complexity and deployment costs. This work presents a scalable, efficient, and highly controllable solution for LLM content safety.
format Preprint
id arxiv_https___arxiv_org_abs_2508_14904
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Efficient Switchable Safety Control in LLMs via Magic-Token-Guided Co-Training
Si, Jianfeng
Sun, Lin
Tan, Zhewen
Zhang, Xiangzheng
Computation and Language
Artificial Intelligence
Current methods for content safety in Large Language Models (LLMs), such as Supervised Fine-Tuning (SFT) and Reinforcement Learning from Human Feedback (RLHF), often rely on multi-stage training pipelines and lack fine-grained, post-deployment controllability. To address these limitations, we propose a unified co-training framework that efficiently integrates multiple safety behaviors: positive (lawful/prosocial), negative (unfiltered/risk-prone) and rejective (refusal-oriented/conservative) within a single SFT stage. Notably, each behavior is dynamically activated via a simple system-level instruction, or magic token, enabling stealthy and efficient behavioral switching at inference time. This flexibility supports diverse deployment scenarios, such as positive for safe user interaction, negative for internal red-teaming, and rejective for context-aware refusals triggered by upstream moderation signals. This co-training strategy induces a distinct Safety Alignment Margin in the output space, characterized by well-separated response distributions corresponding to each safety mode. The existence of this margin provides empirical evidence for the model's safety robustness and enables unprecedented fine-grained control. Experiments show that our method matches the safety alignment quality of SFT+DPO, with our 8B model notably surpassing DeepSeek-R1 (671B) in safety performance, while significantly reducing both training complexity and deployment costs. This work presents a scalable, efficient, and highly controllable solution for LLM content safety.
title Efficient Switchable Safety Control in LLMs via Magic-Token-Guided Co-Training
topic Computation and Language
Artificial Intelligence
url https://arxiv.org/abs/2508.14904