arXiv:2508.02079cs.LGcs.AI2025-08被引 6

提出AlignGuard-LoRA,让大模型微调时更安全不跑偏。

AlignGuard-LoRA: Alignment-Preserving Fine-Tuning via Fisher-Guided Decomposition and Riemannian-Geodesic Collision Regularization

  • 基于费雪信息矩阵和黎曼路径正则化,限制敏感参数更新
  • 在安全评测中使对齐漂移降低50%,不影响下游任务性能
  • 适合关注模型安全、可控性的研究人员和工程师

低秩适配(LoRA)已成为高效微调大语言模型的标准方法。然而,即使微小的LoRA更新也可能引发对齐漂移,导致安全性和行为约束弱化。为此,我们提出AlignGuard-LoRA(AGL),一种在微调过程中保持对齐的原理性框架。AGL引入主任务损失、基于费雪信息矩阵的正则化以限制对齐敏感子空间的更新,以及任务特定正则化以稳定新知识整合。进一步提出碰撞感知正则化,结合黎曼重叠(惩罚坐标干扰)与测地线分离(鼓励独立更新几何)。我们构建了DriftCaps,一个针对安全与非安全提示的诊断基准,用于量化对齐漂移与安全性退化。实证评估表明,AGL在关键安全基准上最多可将对齐漂移降低50%,且不损害下游任务性能。全面消融实验确认各组件均独立贡献于保持潜在安全行为。最后,我们推导并验证了灾难性遗忘的缩放定律,发现AGL能抑制微调后损失上升,同时保留适应动态。AGL是对LoRA的结构化改进,在最小代价下实现对齐保持。为促进进一步探索,我们开源了实现。

原文摘要 · Abstract (English)

Low-rank adaptation (LoRA) has become a standard tool for efficiently fine-tuning large language models (LLMs). Yet, even minor LoRA updates can induce alignment drift, weakening safety and behavioral constraints through entangled parameter changes. To address this, we propose AlignGuard-LoRA (AGL), a principled framework for preserving alignment during finetuning. AGL introduces several key components: a primary task loss for supervision, Fisher Information Matrix-based regularization to restrict updates in alignment-sensitive subspaces, and task-specific regularization to stabilize the integration of new knowledge. We further introduce collision-aware regularization, blending Riemannian overlap -- which penalizes coordinate-wise interference -- and geodesic separation -- which encourages disjoint update geometry. We curate DriftCaps, a targeted diagnostic benchmark of safe and unsafe prompts designed to quantify alignment drift and safety degradation. Empirical evaluations show that AGL mitigates alignment drift by up to 50% on safety-critical benchmarks without degrading downstream task performance. Comprehensive ablation confirms that each component contributes distinctly to preserving latent safety behaviors. Finally, we derive and validate a scaling law for catastrophic forgetting, revealing that AGL flattens post-finetuning loss escalation while preserving adaptation dynamics. AGL is a structurally grounded refinement of LoRA, ensuring alignment preservation with minimal trade-offs. To encourage further exploration and development, we open-source our implementation.

LoRA模型安全对齐

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。