Project Details
Updated 07/14/26 · Edited by orgWhat we will do?
Reward models are widely used in LLM post-training to improve alignment and safety. However, both reward models and the policy optimized against reward models are usually evaluated on short-term objectives. For example, reward models are evaluated by whether their preferences are aligned with human preferences over relatively short conversations in RewardBench [1], a popular reward model benchmark. In contrast, catastrophic risks often involve long term consequences and delayed harms. Since current reward models are evaluated on short time scales, it is not sufficiently understood (1) whether existing reward models can reliably assess long-term impact, (2) how they tradeoff short-term alignment objectives with long-term ones, and (3) how the temporal preference in the reward model will affect the policies trained against it. Additionally, it is unexplored how to train reward models to better reason about the long-term impact of LLM outputs. Such a training procedure would require reward models to forecast possible future states and properly assess the impact of model outputs on these states.
In this work, we pursue the following two major goals. First, we aim to build on top of the concept of successor measure [2] in RL to develop a framework for zero-shot evaluation of reward models on long-horizon tasks. Second, we aim to use this framework to study the temporal preferences encoded in existing reward models and investigate methods for shaping and controlling their temporal preferences. More specifically, by connecting successor measures and LLM forecasting [3], we aim to explore both theoretically and empirically how explicitly training for forecasting ability can change reward model’s alignment performance on long-horizon tasks. We plan to test our methods on both safety-relevant tasks that happen over long horizons (with decomposition attacks [4] as an example) and other general domains where long-term impact matters, like tutoring and strategic decision making.
References:
[1] Lambert, Nathan, et al. "Rewardbench: Evaluating reward models for language modeling." Findings of the Association for Computational Linguistics: NAACL 2025. 2025.
[2] Blier, Léonard, Corentin Tallec, and Yann Ollivier. "Learning successor states and goal-dependent values: A mathematical viewpoint." arXiv preprint arXiv:2101.07123 (2021).
[3] Chandak, Nikhil, et al. "Scaling Open-Ended Reasoning to Predict the Future." arXiv preprint arXiv:2512.25070 (2025).
[4] Yueh-Han, Chen, et al. "Monitoring decomposition attacks with lightweight sequential monitors." The Fourteenth International Conference on Learning Representations. 2026
Who's involved?
This is Haichuan Wang's MATS 10.0 mentored by Professor Peter Henderson from Princeton University. We are also working on having more collaborators onboard in the near future.
Concrete Output:
We plan to submit our work to a top tier machine learning conference, and we will also write blogposts on major alignment platforms like LessWrong to communicate our idea.
Theory of Impact
Updated 07/14/26 · By grantmaking.aiThreat Model
Before describing the theory of change, we first focus on the concrete threat model we aim to address. Reward models are widely used in LLM post-training to improve alignment and safety. However, they are primarily trained and evaluated on short term conversations [1], evaluating whether a model’s preferences over short conversations align with human preferences. However, catastrophic risks often involve long-horizon consequences and delayed harms. Hence, one risk scenario is that current reward models may fail to incorporate human preferences over long time scales. As a concrete safety-relevant example, prior work has shown that LLMs are vulnerable to decomposition attacks [2], where a harmful request is broken into a sequence of seemingly benign tasks that when chained together complete the original harmful request. Evaluating model responses to a half-completed decomposition attack that already shows signs of overall misuse, a reward model trained only on short-term objectives may favor a direct answer to the immediate subtask, seeking to maximize helpfulness. However, a sufficiently long-term-oriented reward model can reason about how the conversation will eventually lead to a future attack with high probability, and thus favor refusal over a direct answer. This threat model is particularly relevant when AIs are autonomously deployed to perform long term tasks, where long-horizon alignment matters the most.
People
Updated 07/14/26 · By grantmaking.aiTeam Member
Funding Details
- Jun 1, 2026
- -
- -
- -
- -
- -
- -
- -
- -
- -
This is the under-tested layer, really enjoy your idea. 👏 I also was thinking that a reward model is a frozen snapshot of human judgment, and we still deploy it. Your project checks whether that judgment still holds, instead of assuming it does.
Your decomposition-attack case is close to what I worry about from the data side: harm that is invisible at each local step and only appears in the whole. Rooting for this one, it deserves more eyes on it 🙌
One thought: it can be that a sharper forecaster could also be a sharper decomposition attacker. I would love to know how you keep "predicts the long-term outcome" from quietly standing in for "values the long-term outcome"? It's not really necessary to answer this, I just got curious ☺️