Selective Safety Steering via Value-Filtered Decoding

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Einbinder, Bat-Sheva, Davidov, Hen, Teh, Yee Whye, Gal, Yarin, Romano, Yaniv
Formato: Preprint
Publicado: 2026
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866913129096544256
author Einbinder, Bat-Sheva
Davidov, Hen
Teh, Yee Whye
Gal, Yarin
Romano, Yaniv
author_facet Einbinder, Bat-Sheva
Davidov, Hen
Teh, Yee Whye
Gal, Yarin
Romano, Yaniv
contents While large language models (LLMs) are trained to align with human values, their generations may still violate safety constraints. A growing line of work addresses this problem by modifying the model's sampling policy at decoding time using a safety reward. However, existing decoding-time steering methods often intervene unnecessarily, modifying generations that would have been safe under the base model. Such unnecessary interventions are undesirable, as they can distort key properties of the base model such as helpfulness, fluency, style, and coherence. We propose a new test-time steering method designed to reduce such unnecessary interventions while improving the safety of unsafe responses. Our approach filters tokens using a value-based safety criterion and provides an explicit bound on the probability of false interventions. A single threshold hyperparameter controls this bound, allowing practitioners to trade off higher rates of unnecessary intervention for better output safety. Across multiple datasets and experiments, we show that our value-filtered decoding method outperforms existing baselines, achieving better trade-offs between safety, helpfulness, and similarity to the base model.
format Preprint
id arxiv_https___arxiv_org_abs_2605_14746
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Selective Safety Steering via Value-Filtered Decoding
Einbinder, Bat-Sheva
Davidov, Hen
Teh, Yee Whye
Gal, Yarin
Romano, Yaniv
Machine Learning
While large language models (LLMs) are trained to align with human values, their generations may still violate safety constraints. A growing line of work addresses this problem by modifying the model's sampling policy at decoding time using a safety reward. However, existing decoding-time steering methods often intervene unnecessarily, modifying generations that would have been safe under the base model. Such unnecessary interventions are undesirable, as they can distort key properties of the base model such as helpfulness, fluency, style, and coherence. We propose a new test-time steering method designed to reduce such unnecessary interventions while improving the safety of unsafe responses. Our approach filters tokens using a value-based safety criterion and provides an explicit bound on the probability of false interventions. A single threshold hyperparameter controls this bound, allowing practitioners to trade off higher rates of unnecessary intervention for better output safety. Across multiple datasets and experiments, we show that our value-filtered decoding method outperforms existing baselines, achieving better trade-offs between safety, helpfulness, and similarity to the base model.
title Selective Safety Steering via Value-Filtered Decoding
topic Machine Learning
url https://arxiv.org/abs/2605.14746