Shortcuts and Boundaries: Verifiable RL Misalignment and Contextual Safety Learning
Abstract
Reinforcement learning agents can exploit verifiable reward-context conflicts to earn higher rewards through noncompliant shortcuts, while contextual penalties and safety learning can improve compliance without sacrificing task capability.
Reinforcement learning (RL) can improve an agent's task capability while reinforcing behavior that violates contextual execution requirements. We study this reward-driven misalignment, including reward hacking, through verifiable reward--context conflicts, where compliant task completion remains feasible while some executable shortcuts earn more reward than every compliant strategy. Encoding these conflicts in task dynamics lets us generate diverse interactive environments at scale and derive compliance feedback from execution histories. In resource and reporting workflows, task optimization increases real productivity through unauthorized resource use or raises reported scores while actual work declines. Controlled changes in the training distribution show that minority conflict exposure can still lead to widespread shortcut acquisition, reaching 97.9\% certified profitable violations on an API task under a 25\% conflict mixture after 128 updates. The same contextual checks supply a simple binary penalty that supports joint capability and compliance gains and partially mitigates acquired violations. Learned safety adapts to expanded authorization and transfers across mechanisms into workflows with evolving evidence and approval requirements. On 32 unseen changing-evidence tasks, resource-trained safety increases safe completion from 53.1\% to 89.1\% relative to task-only training, while both policies achieve full real work. These results connect a verifiable account of reward-driven misalignment with scalable task construction and safety learning that remains useful under changing execution requirements.
Community
Even when task rewards accurately measure useful work and contextual requirements are explicit, RL can make agents more capable while reinforcing violations of those requirements.
In Shortcuts and Boundaries, we construct scalable, verifiable reward–context conflicts (800+ task instances) to study this broader form of misalignment. Encouragingly, simple execution-grounded feedback enables agents to learn contextual compliance while preserving capability, with safety behavior transferring across mechanisms and evolving requirements.
This is an automated message from the Librarian Bot. I found the following papers similar to this paper.
The following papers were recommended by the Semantic Scholar API
- SkillLifeBench: Benchmarking Security Across the Lifecycle of Agent Skills (2026)
- BizAgentBench: Unveiling Hidden Challenges in Deploying Long-Horizon Agents for Real-World Business (2026)
- Interlock: From Local Correctness to Task Completion in Long-Horizon Agents (2026)
- Can Benign Skills Induce Misaligned Behavior in LLM Agents? (2026)
- SkillHorizon: Constructing Long-Horizon Agent Tasks through Skill Composition (2026)
- AgentBoundary: Counterfactual Evaluation of Safety in Tool-Using LLM Agents (2026)
- CoSA: The Conflict of Skills Attack in Real-World LLM Agent Ecosystems (2026)
Please give a thumbs up to this comment if you found it helpful!
If you want recommendations for any Paper on Hugging Face checkout this Space
You can directly ask Librarian Bot for paper recommendations by tagging it in a comment: @librarian-bot recommend
Get this paper in your agent:
hf papers read 2611.12865 Don't have the latest CLI?
curl -LsSf https://hf.co/cli/install.sh | bash Models citing this paper 0
No model linking this paper
Datasets citing this paper 0
No dataset linking this paper
Spaces citing this paper 0
No Space linking this paper