{"id":"https://openalex.org/W7164934046","doi":"https://doi.org/10.48550/arxiv.2606.16808","title":"Adaptive and Explicit safe: Triggering Latent Safety Awareness in Large Reasoning Models","display_name":"Adaptive and Explicit safe: Triggering Latent Safety Awareness in Large Reasoning Models","publication_year":2026,"publication_date":"2026-06-15","ids":{"openalex":"https://openalex.org/W7164934046","doi":"https://doi.org/10.48550/arxiv.2606.16808"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.16808","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16808","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.16808","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120697246","display_name":"Ke Miao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Miao, Ke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138757446","display_name":"Jiaxin Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Jiaxin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100654418","display_name":"Hongliang Chen","orcid":"https://orcid.org/0000-0001-5786-9493"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Hongliang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005443916","display_name":"Yuke Hu","orcid":"https://orcid.org/0000-0001-5780-6898"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Yuke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138702452","display_name":"Zhan Qin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qin, Zhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.37220001220703125,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.37220001220703125,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.13109999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.1054999977350235,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.7971000075340271},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.7361999750137329},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.45989999175071716},{"id":"https://openalex.org/keywords/preference","display_name":"Preference","score":0.2809999883174896},{"id":"https://openalex.org/keywords/term","display_name":"Term (time)","score":0.2736999988555908}],"concepts":[{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7971000075340271},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.7361999750137329},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7315999865531921},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.45989999175071716},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3684999942779541},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34130001068115234},{"id":"https://openalex.org/C2781249084","wikidata":"https://www.wikidata.org/wiki/Q908656","display_name":"Preference","level":2,"score":0.2809999883174896},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2761000096797943},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.2736999988555908},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26739999651908875}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.16808","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16808","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.16808","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16808","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6083489656448364,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"While":[0],"Large":[1],"Reasoning":[2],"Models":[3],"(LRMs)":[4],"excel":[5],"at":[6],"complex":[7],"tasks,":[8],"they":[9],"remain":[10],"highly":[11],"vulnerable":[12],"to":[13,76,81,102,113],"sophisticated":[14],"jailbreaks":[15],"and":[16,85,118,124,144,165,169],"direct":[17],"harmful":[18,168],"queries.":[19],"To":[20,65],"address":[21],"this":[22,67],"vulnerability,":[23],"prior":[24],"works":[25],"depend":[26],"heavily":[27],"on":[28,161,167,183],"external":[29],"manual":[30],"data":[31],"annotation":[32],"for":[33,92,99,129],"safety":[34,44,68,83,122,150],"alignment.":[35],"However,":[36],"we":[37,60,70,107],"observe":[38],"that":[39],"LRMs":[40],"can":[41],"inherently":[42],"identify":[43],"risks":[45],"when":[46],"being":[47,138],"re-presented":[48],"with":[49],"original":[50],"queries":[51,101],"alongside":[52],"their":[53],"own":[54],"reasoning":[55,90],"trajectories":[56],"--":[57],"a":[58],"capability":[59],"term":[61],"Latent":[62],"Safety":[63],"Awareness.":[64],"leverage":[66],"awareness,":[69],"first":[71],"employ":[72],"Supervised":[73],"Fine-Tuning":[74],"(SFT)":[75],"explicitly":[77],"induce":[78],"safe":[79],"tags":[80],"trigger":[82],"analysis":[84,123],"guidance":[86],"following":[87],"the":[88,116,121,154],"initial":[89],"content":[91],"unsafe":[93],"queries,":[94],"while":[95],"preserving":[96],"standard":[97],"responses":[98,127],"general":[100,184],"ensure":[103],"adaptive":[104],"triggering.":[105],"Subsequently,":[106],"apply":[108],"Direct":[109],"Preference":[110],"Optimization":[111],"(DPO)":[112],"further":[114],"enhance":[115],"correctness":[117],"stability":[119],"of":[120,159],"guidance.":[125],"Notably,":[126],"required":[128],"both":[130],"training":[131],"stages":[132],"are":[133],"entirely":[134],"generated":[135],"by":[136],"models":[137],"optimized.":[139],"With":[140],"(Safe":[141],"Trigger)":[142],"SFT":[143],"DPO,":[145],"experimental":[146],"results":[147],"demonstrate":[148],"significant":[149],"enhancement.":[151],"For":[152],"example,":[153],"Attack":[155],"Success":[156],"Rate":[157],"(ASR)":[158],"DeepSeek-R1-Distill-Llama-8B,":[160],"average,":[162],"drops":[163],"24.65%":[164],"36.72%":[166],"jailbreak":[170],"benchmarks,":[171],"respectively.":[172],"Finally,":[173],"our":[174],"Safe":[175],"Trigger":[176],"method":[177],"exerts":[178],"almost":[179],"no":[180],"negative":[181],"impact":[182],"performance":[185],"or":[186],"user":[187],"experience.":[188]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-17T00:00:00"}