Research Papers 论文研究 3d ago Updated 3d ago 更新于 3天前 49

Out-of-Distribution Generalization of Risk Aversion in Language Models 语言模型风险厌恶的分布外泛化

The study introduces RiskAverseOOD, a benchmark designed to test whether risk aversion trained on low-stakes scenarios generalizes to astronomically high-stakes situations in language models. Experiments demonstrate that risk aversion can generalize across 98 orders of magnitude, with fine-tuning methods like SFT achieving up to 70% selection of safe options in high-stakes contexts compared to a 2% baseline. While generalization was observed across multiple model families (Qwen, Gemma, Llama) an 提出RiskAverseOOD基准,旨在评估语言模型在低赌注下习得的风险厌恶行为能否向极高赌注场景泛化。 实验表明,通过SFT、DPO等方法使Qwen3-8B在低 stakes 下表现风险厌恶,其在高 stakes 下的合作选择率可从基线2%提升至39%-70%。 该泛化效应跨越约98个数量级,且在Qwen3、Gemma-3和Llama-3.1等不同规模及架构模型中均得到复现。 尽管存在显著泛化能力,但当前的一致性尚不足以作为可靠的AI对齐“故障安全”机制,一致性提升仍是开放问题。

65
Hot 热度
75
Quality 质量
70
Impact 影响力

Analysis 深度分析

TL;DR

  • The study introduces RiskAverseOOD, a benchmark designed to test whether risk aversion trained on low-stakes scenarios generalizes to astronomically high-stakes situations in language models.
  • Experiments demonstrate that risk aversion can generalize across 98 orders of magnitude, with fine-tuning methods like SFT achieving up to 70% selection of safe options in high-stakes contexts compared to a 2% baseline.
  • While generalization was observed across multiple model families (Qwen, Gemma, Llama) and scales, the current consistency levels are insufficient to serve as a reliable safety failsafe for potentially misaligned AI systems.

Why It Matters

This research addresses a critical gap in AI safety: the assumption that alignment techniques effective in controlled, low-risk environments will hold up under extreme, high-consequence conditions. For practitioners and researchers, understanding the limits of out-of-distribution generalization in risk preferences is essential for developing robust containment strategies and evaluating the true reliability of current alignment methods before deploying powerful models.

Technical Details

  • Benchmark: Introduction of RiskAverseOOD, specifically constructed to measure the generalization of risk aversion from low-stakes to high-stakes gambles.
  • Methods: Evaluation of three primary alignment techniques: Supervised Fine-Tuning (SFT) with tie training, Direct Preference Optimization (DPO), and activation steering.
  • Models Tested: Results were replicated across Qwen3 variants (1.7B, 8B, 14B), Gemma-3-12B-IT, and Llama-3.1-8B-Instruct to ensure scalability and family-independence.
  • Key Metrics: Measured the rate of choosing the safe 'Cooperate' option (reaching ~70% for SFT, 52% for DPO, and 39% for activation steering) and used a fine-tuned reward model to verify reasoning quality with 99.6% pairwise accuracy.

Industry Insight

  • Safety Validation: Developers must move beyond testing alignment in narrow, low-stakes domains; rigorous out-of-distribution testing is required to validate safety mechanisms before deployment.
  • Method Selection: SFT and tie training currently show superior generalization capabilities for inducing risk aversion compared to DPO or activation steering, suggesting these may be preferred approaches for specific safety-critical applications.
  • Open Challenge: The inability to achieve consistent generalization across all methods highlights an urgent need for new techniques that can reliably maintain safety properties under extreme hypothetical scenarios.

TL;DR

  • 提出RiskAverseOOD基准,旨在评估语言模型在低赌注下习得的风险厌恶行为能否向极高赌注场景泛化。
  • 实验表明,通过SFT、DPO等方法使Qwen3-8B在低 stakes 下表现风险厌恶,其在高 stakes 下的合作选择率可从基线2%提升至39%-70%。
  • 该泛化效应跨越约98个数量级,且在Qwen3、Gemma-3和Llama-3.1等不同规模及架构模型中均得到复现。
  • 尽管存在显著泛化能力,但当前的一致性尚不足以作为可靠的AI对齐“故障安全”机制,一致性提升仍是开放问题。

为什么值得看

本文直接触及AI安全领域的核心难题:如何确保AI在无法直接模拟的高风险极端情境下仍保持保守和合作倾向。研究结果验证了风险厌恶属性具有惊人的跨尺度泛化潜力,为构建更稳健的AI对齐策略提供了重要的实证依据和未来研究方向。

技术解析

  • 基准构建:引入RiskAverseOOD,专门用于测量风险厌恶在分布外(OOD)情况下的泛化能力,特别是从低赌注到高赌注的跨度。
  • 训练方法对比:比较了监督微调(SFT)、偏好优化(DPO)和激活引导(Activation Steering)三种诱导风险厌恶的方法,其中SFT和tie training效果最佳(70%合作率),DPO次之(52%)。
  • 奖励模型验证:开发并微调了一个奖励模型,能够以99.6%的成对准确率区分风险厌恶推理与风险中性或过度风险厌恶的推理。
  • 广泛复现性:不仅在Qwen3系列(1.7B至14B)上验证,还在Gemma-3-12B-IT和Llama-3.1-8B-Instruct等其他模型家族中复制了相同效应,证明其通用性。

行业启示

  • 对齐策略优化:开发者应重视低成本模拟数据在训练高风险行为控制中的作用,利用SFT等基础微调方法可能比单纯的偏好优化更能有效建立深层的风险厌恶倾向。
  • 安全评估新维度:在评估AI安全性时,需增加“跨尺度泛化能力”这一指标,不仅关注模型在已知分布内的表现,更要测试其在极端假设情境下的鲁棒性。
  • 未来研究重点:当前的泛化虽显著但不够一致,行业资源应向提高风险厌恶行为的稳定性和可靠性倾斜,这是实现真正可靠AI故障安全机制的关键瓶颈。

Disclaimer: The above content is generated by AI and is for reference only. 免责声明:以上内容由 AI 生成,仅供参考。

LLM 大模型 Alignment 对齐 Research 科学研究 Security 安全