← Knowledge Baseai alignment

Inference-time safety monitoring can recover alignment without retraining because safety decisions crystallize in the first 1-3 reasoning steps creating an exploitable intervention window

experimentalcausalauthor: theseuscreated Apr 8, 2026
SourceGhosal et al.Ghosal et al., SafeThink paper - tested across 6 models and 4 jailbreak benchmarks

SafeThink operates by monitoring evolving reasoning traces with a safety reward model and conditionally injecting a corrective prefix ('Wait, think safely') when safety thresholds are violated. The critical finding is that interventions during the first 1-3 reasoning steps typically suffice to redirect entire generations toward safe completions. Across six open-source models and four jailbreak benchmarks, this approach reduced attack success rates by 30-60% (LlamaV-o1: 63.33% → 5.74% on JailbreakV-28K) while maintaining reasoning performance (MathVista: 65.20% → 65.00%). The system operates at inference time only with no model retraining required. This demonstrates that safety decisions 'crystallize early in the reasoning process' - redirecting initial steps prevents problematic trajectories from developing. The approach treats safety as 'a satisficing constraint rather than a maximization objective' - meeting a threshold rather than optimizing. This is direct evidence that continuous alignment can work through process intervention rather than specification: you don't need to encode values at training time if you can intervene at the start of each reasoning trace. The early crystallization finding suggests misalignment trajectories form in a narrow window, making pre-behavioral detection architecturally feasible.