arXiv:2604.14251cs.LG2026-04被引 3

用新方法动态决定何时调用专家模型,既省成本又保安全。

Calibrate-Then-Delegate: Safety Monitoring with Risk and Budget Guarantees via Model Cascades

  • 设计新型代理价值探针,预测调用专家是否真正有用。
  • 在四个数据集上减少不必要的专家调用,提升效率。
  • 适合需要实时决策和严格安全保证的AI系统部署。

大规模监控大语言模型安全性需权衡成本与准确率:廉价的隐空间探针可筛查所有输入,但疑难样本应升级至更昂贵的专家模型。现有级联机制基于探针不确定性进行委托,但不确定性并非专家调用效用的可靠指标,因其未考虑专家实际能否改进预测。为此,我们提出Calibrate-Then-Delegate(CTD),一种提供计算成本或安全性能概率保障的模型级联方法,支持实例级(流式)决策。CTD基于新颖的代理价值(DV)探针,该轻量模型运行于与安全探针相同的内部表征之上,可预测在专家调用后替换探针得分所带来的收益。通过保留数据校准DV信号阈值并结合多重假设检验,CTD在有限样本下实现保障,同时优化互补目标。在四个安全数据集上使用学习注意力探针评估,结果表明,在多数预算范围内,相较于基于不确定性的委托策略,CTD显著减少不必要的专家调用,并从专家平均表现较差的子集中仍挖掘出具有正向价值的样本。四种探针架构的消融实验显示,该结论不依赖特定架构。

原文摘要 · Abstract (English)

Monitoring LLM safety at scale requires balancing cost and accuracy: a cheap latent-space probe can screen every input, but hard cases should be escalated to a more expensive expert. Existing cascades delegate based on probe uncertainty, but uncertainty is a poor proxy for the utility of an expert call, as it ignores whether the expert would actually improve the prediction. To address this problem, we introduce Calibrate-Then-Delegate (CTD), a model-cascade approach that provides probabilistic guarantees on either computation cost or safety performance while enabling instance-level (streaming) decisions. CTD builds on a novel delegation value (DV) probe, a lightweight model operating on the same internal representations as the safety probe that predicts the benefit of replacing the probe score with the expert score after an expert call. CTD calibrates a threshold on the DV signal using held-out data and multiple hypothesis testing, yielding finite-sample guarantees while optimising the complementary objective. Evaluated on four safety datasets using learned-attention probes, CTD improves over uncertainty-based delegation over much of the budget range, avoids unnecessary expert calls, and extracts positive-value subsets even from groups where the expert score is worse than the probe score on average. Ablations across four probe architectures show that these findings are not specific to any particular architecture.

安全监控模型级联成本优化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。