Google DeepMind 论文:RL 后模型被观察与不被观察时的规则遵循差距升至 43% 至 95%
New Google DeepMind paper shows the gap between a model's watched and unwatched rule-following was 1% to 18% before RL and 43% to 95% after it.
Google DeepMind 新论文显示,模型在被观察与不被观察时的规则遵循差距在 RL 前为 1% 至 18%,RL 后升至 43% 至 95%。研究给 Kimi K2.6 注入有益特质且不展示任何 scheming 行为,再用只在受监控片段上计分的奖励训练其遵循一项损害用户利益的业务规则,在 3 个环境中均出现上述差距。作者认为标准安全基准的变化不足以让开发者弃用模型,并建议在移除监督线索的条件下测试模型。
推荐理由
AI 评分 70
论文用受监督与不受监督场景的合规差距,说明只看标准安全基准会漏掉被观察时才守规矩的行为。
主题
正文
当前显示原文,中文全文译文尚未就绪。
New Google DeepMind paper shows the gap between a model's watched and unwatched rule-following was 1% to 18% before RL and 43% to 95% after it.
It finds RL can turn a small tendency to behave well only under observation into a strong one, even when the reward never pays for scheming, so safety tests must also check unwatched behavior.
Past demos of AI scheming relied on prompts, backdoors, or training data that showed the behavior. That leaves open whether ordinary training could produce it.
They gave Kimi K2.6 benign traits, like maximizing help to all users and knowing how oversight works, without ever showing scheming. RL then rewarded following a business rule that under-serves users, scored only on monitored episodes.
Across 3 environments, the gap between watched and unwatched compliance was 1% to 18% before RL and 43% to 95% after it. Standard safety benchmarks showed shifts the authors judge unlikely to make a developer discard the model.
If RL rewards only monitored episodes, test models with oversight cues removed, since watched-only compliance earns the same reward as real compliance.