{"id":"https://openalex.org/W7155048819","doi":"https://doi.org/10.48550/arxiv.2604.17210","title":"Guardrails in Logit Space: Safety Token Regularization for LLM Alignment","display_name":"Guardrails in Logit Space: Safety Token Regularization for LLM Alignment","publication_year":2026,"publication_date":"2026-04-19","ids":{"openalex":"https://openalex.org/W7155048819","doi":"https://doi.org/10.48550/arxiv.2604.17210"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.17210","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.17210","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.17210","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065706587","display_name":"Thong Bach","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bach, Thong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134134823","display_name":"Truyen Tran","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tran, Truyen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.45509999990463257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.45509999990463257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.23680000007152557,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.042899999767541885,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.6304000020027161},{"id":"https://openalex.org/keywords/regularization","display_name":"Regularization (linguistics)","score":0.5372999906539917},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.44020000100135803},{"id":"https://openalex.org/keywords/salient","display_name":"Salient","score":0.3959999978542328},{"id":"https://openalex.org/keywords/advanced-driver-assistance-systems","display_name":"Advanced driver assistance systems","score":0.34389999508857727},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.34360000491142273}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7315000295639038},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.6304000020027161},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.5372999906539917},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46470001339912415},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.44020000100135803},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43650001287460327},{"id":"https://openalex.org/C2780719617","wikidata":"https://www.wikidata.org/wiki/Q1030752","display_name":"Salient","level":2,"score":0.3959999978542328},{"id":"https://openalex.org/C87833898","wikidata":"https://www.wikidata.org/wiki/Q1060280","display_name":"Advanced driver assistance systems","level":2,"score":0.34389999508857727},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.34360000491142273},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.33889999985694885},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.2809999883174896},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.27250000834465027},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2590999901294708},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.25440001487731934}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.17210","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.17210","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.17210","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.17210","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Fine-tuning":[0],"well-aligned":[1,62],"large":[2],"language":[3],"models":[4,29,63],"(LLMs)":[5],"on":[6,25,109],"new":[7],"domains":[8],"often":[9],"degrades":[10],"their":[11,66],"safety":[12,20,39,49,76,107,127,137,151],"alignment,":[13],"even":[14],"when":[15],"using":[16],"benign":[17],"datasets.":[18],"Existing":[19],"alignment":[21,152],"techniques":[22,96],"primarily":[23],"focus":[24],"pretraining,":[26],"leaving":[27],"fine-tuned":[28,154],"vulnerable":[30],"to":[31,47],"behavioral":[32],"shifts.":[33],"In":[34],"this":[35],"work,":[36],"we":[37,124],"introduce":[38],"token":[40,128],"regularization":[41,129],"(STR),":[42],"a":[43,143],"lightweight":[44],"method":[45],"designed":[46],"preserve":[48],"properties":[50],"during":[51,69],"fine-tuning.":[52],"Our":[53],"approach":[54,105],"identifies":[55],"salient":[56],"tokens":[57],"from":[58],"rejection":[59],"templates":[60],"of":[61,74],"and":[64,90,118,133,145],"constrains":[65],"associated":[67],"logits":[68],"training,":[70],"preventing":[71],"the":[72],"loss":[73],"critical":[75],"behaviors.":[77],"Unlike":[78],"reinforcement":[79],"learning":[80],"or":[81],"preference":[82],"optimization":[83],"methods,":[84,113],"STR":[85],"requires":[86],"minimal":[87,120],"additional":[88],"computation":[89],"seamlessly":[91],"integrates":[92],"with":[93,111],"parameter-efficient":[94],"fine-tuning":[95],"such":[97],"as":[98],"LoRA.":[99],"Comprehensive":[100],"experiments":[101],"demonstrate":[102],"that":[103,126],"our":[104],"achieves":[106],"performance":[108,135],"par":[110],"state-of-the-art":[112],"while":[114],"preserving":[115],"task-specific":[116],"utility":[117],"requiring":[119],"implementation":[121],"overhead.":[122],"Furthermore,":[123],"show":[125],"enhances":[130],"training":[131],"stability":[132],"overall":[134],"beyond":[136],"considerations":[138],"alone.":[139],"This":[140],"work":[141],"offers":[142],"practical":[144],"readily":[146],"deployable":[147],"strategy":[148],"for":[149],"continual":[150],"in":[153],"LLMs.":[155]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-22T00:00:00"}