提出去中心化框架TRUST,让大模型推理更可信、更安全。
TRUST: A Decentralized Framework for Auditing Large Language Model Reasoning
- 用多方共识机制和分层图结构,实现可扩展的自动审计。
- 在多模型多任务测试中,能有效发现推理错误,抗30%恶意参与者。
- 适合关注AI安全与信任的开发者、监管者及高风险应用方。
大语言模型生成复杂的推理链条,揭示其决策过程,但验证这些中间步骤的忠实性与无害性仍是未解难题。现有审计方法集中、不透明且难扩展,导致专有模型在高风险领域部署存在重大风险。我们识别出四大挑战:(1)鲁棒性:集中式审计员是单点故障,易受偏见或攻击;(2)可扩展性:推理链过长难以人工审核;(3)透明度:封闭审计削弱公众信任;(4)隐私:暴露完整推理可能导致模型窃取或蒸馏。我们提出TRUST,一个透明、去中心化的审计框架,通过:(1) 多方审计员间的共识机制,确保在最多30%恶意参与者下仍正确;(2) 推理链的分层有向无环图分解,支持并行可扩展审计;(3) 区块链记录所有验证决策,实现公开问责;(4) 隐私保护的分段共享,仅披露部分推理步骤以保护专有逻辑。我们提供了框架安全性和经济激励的理论保证。在多个LLM(GPT-OSS、DeepSeek-r1、Qwen)和推理任务(数学、医疗、科学、人文)上的实验表明,TRUST能有效检测推理缺陷,并对对抗性审计员保持鲁棒性。本工作开创了去中心化AI审计先河,为安全可信的大模型部署提供可行路径。
原文摘要 · Abstract (English)
Large Language Models generate complex reasoning chains that reveal their decision-making, yet verifying the faithfulness and harmlessness of these intermediate steps remains a critical unsolved problem. Existing auditing methods are centralized, opaque, and hard to scale, creating significant risks for deploying proprietary models in high-stakes domains. We identify four core challenges: (1) Robustness: Centralized auditors are single points of failure, prone to bias or attacks. (2) Scalability: Reasoning traces are too long for manual verification. (3) Opacity: Closed auditing undermines public trust. (4) Privacy: Exposing full reasoning risks model theft or distillation. We propose TRUST, a transparent, decentralized auditing framework that overcomes these limitations via: (1) A consensus mechanism among diverse auditors, guaranteeing correctness under up to $30\%$ malicious participants. (2) A hierarchical DAG decomposition of reasoning traces, enabling scalable, parallel auditing. (3) A blockchain ledger that records all verification decisions for public accountability. (4) Privacy-preserving segmentation, sharing only partial reasoning steps to protect proprietary logic. We provide theoretical guarantees for the security and economic incentives of the TRUST framework. Experiments across multiple LLMs (GPT-OSS, DeepSeek-r1, Qwen) and reasoning tasks (math, medical, science, humanities) show TRUST effectively detects reasoning flaws and remains robust against adversarial auditors. Our work pioneers decentralized AI auditing, offering a practical path toward safe and trustworthy LLM deployment.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。