Chapter 3: Safety and Alignment Challenges
Jailbreaking
Attempts to bypass safety measures:
- Role-playing prompts
- Encoding harmful requests
- Multi-step attacks
- Token manipulation
Defense Strategies
- Input filtering: Detect malicious prompts
- Output filtering: Check generated content
- Robust training: Include adversarial examples
- Constitutional constraints: Built-in principles
The Alignment Tax
Safety measures can reduce helpfulness:
| Approach | Helpfulness | Safety |
|---|---|---|
| Unaligned | High | Low |
| Over-aligned | Low | High |
| Well-aligned | High | High |
Ongoing Research
- Interpretability: Understanding model reasoning
- Red teaming: Systematic vulnerability testing
- Scaling oversight: Human supervision as models grow
- Value learning: Inferring human preferences
Key Challenges
- Specification: What do we want AI to do?
- Robustness: Behavior under distribution shift
- Assurance: Verifying model properties
- Governance: Who decides alignment goals?