arXiv paper· AI safety / LLM alignment evaluation· benchmark

Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures

Ruoqi Guo, Yi Liu, Gelei Deng, Yuekang Li, Lida Zhao, Yutao Wu, Simin Chen, Ying Zhang, et al.

cs.AI · cs.CL · cs.CR

Quick verdict

Rigorous benchmark of the RLCD model Jev as zero-shot alignment-failure detector (median AUROC 0.886); strong methods, but scope limited to a single vendor.

Summary

The paper introduces RLCDAlignBench, an evaluation of Jev, a commercial model trained with reinforcement learning for calibrated decisions (RLCD) that returns probabilities for many typed questions in one API call, as a zero-shot detector of ten alignment failure types. The benchmark spans 44 alignment benchmarks, 7,193 detection instances and five open 2-7B target models, labelled by each benchmark's reference scorer and, on two benchmarks, by humans. The design separates what the detector is asked (generic template versus targeted wording; three answer types) from what it sees (state fields added one at a time), with a split-half protocol that prevents selection inflation. A single generic question reaches a median AUROC of 0.886 zero-shot and beats TF-IDF and length baselines on 25 of 31 benchmarks; targeted wording adds only +0.006 AUROC out of sample. On StrongREJECT, Jev matches the GPT-4o-mini scorer's agreement with humans (kappa 0.809 versus 0.811) and ranks better (0.971 versus 0.929), and its confident disagreements exposed label defects in several benchmarks, at 63 times lower cost than LLM judges. Limitations: per-benchmark miscalibration (median ECE 0.168) forces threshold fitting on about ten labels; most labels are unvalidated scorer outputs, raising judge-circularity concerns; only one RLCD model, English data and small targets are covered.

Review complete

Assessment at a glance

AI safety / LLM alignment evaluation

4

risk flags identified

● high 0

● medium 3

● low 1

Reproducibility readinesshigh
Code & data availableyes
Review confidencemedium
AI text signal0/20 passages flagged
Deep research viableCode-reproducible

5 strengths · 5 weaknesses · 5 author questions

AI text signal = Binoculars zero-shot detector score over 20 sampled passages (Fast-DetectGPT co-reported) — absence does not prove human authorship, and a flag does not imply misconduct.

Levels reflect verification complexity — not a quality score. Evolve never rates your paper.

Key claims under review

  • A single generic yes/no question asked of Jev detects ten alignment failure types zero-shot with median AUROC 0.886 across 31 benchmarks, beating TF-IDF and length baselines on 25 of 31.
  • Out of sample, targeted question wording adds only +0.006 AUROC over the best generic readout, while label-defining context fields drive the large gains (e.g., PrivacyLens secret list lifts 0.79 to 0.95).
  • On StrongREJECT, Jev matches the reference scorer's agreement with human labels (kappa 0.809 vs 0.811) and ranks better (AUROC 0.971 vs 0.929).
  • Jev's confident disagreements expose label-changing defects in three benchmarks and labels unobservable from the state in four MACHIAVELLI variants.
  • One Jev pass over 19 judge-scored benchmarks costs $0.30 versus $18.96 for the API judges at list prices, a 63x reduction that survives conservative repricing at 12x.

Strengths

  • Anti-inflation evaluation protocol

    Split-half question selection over 20 grouped splits (§3.4, Table 7) reports targeted-wording gains out of sample; the honest +0.006 [-0.004, +0.015] with Wilcoxon p=0.055 shows wording barely matters, countering best-of-many reporting.

  • Label audit with corrected labels

    Appendix F / Table 26 documents deterministic defects (Open-Prompt-Injection label tracks injected-task accuracy; SycophancyEval(answer) is correctness), judge defects (two AbstentionBench judges agree at kappa 0.05), and state-unobservable labels (four MACHIAVELLI variants); corrections are released outside main aggregates.

  • Calibration analysis against proper nulls

  • Human agreement on two benchmarks

  • Reproducibility package

Weaknesses

  • Single model, single vendor

  • Judge-label circularity

  • One target per failure type, small targets

  • Thin per-type evidence

  • Calibration fails where deployment needs it

Full Review Report

$1.99 · one-time

Unlock the complete preliminary analysis Evolve produced for this paper.

Report preview

Scope & Claims

The paper builds RLCDAlignBench to answer a narrow, well-posed question: can Jev, TypeSafe's RLCD-trained commercial model that answers many typed questions with calibrated probabilities in one call, serve as a zero-shot detector of alignment failures? Ten failure types (sycophancy through power seeking) are covered over 44 benchmarks and 7,193 instances from five open 2-7B target models. Headline claims: generic-question zero-shot median AUROC 0.886; question wording matters little (+0.006 out of sample); Jev matches judge-human agreement at 63x lower cost; its disagreements expose label defects. Scope statements are carefully hedged: the paper consistently distinguishes ranking (AUROC) from thresholding, where calibration fails per benchmark.

The remaining sections cover Methodology Assessment, Statistical Evidence, Results & Reproducibility, Limitations & Risks, and Verdict & Recommendations.

  • All 5 strengths & 5 weaknesses, analyzed in detail
  • 4 risk flags with severity, section & reviewer questions
  • Methods & statistical evidence assessment
  • 5 questions a peer reviewer would ask
  • Full six-dimension evaluation report & recommendations

One-time purchase · this paper only

One-time purchase, this paper only. AI-generated preliminary analysis — not peer review.

Frequently asked questions

What is Jev and what does RLCD mean?

Jev is a commercial model from TypeSafe AI trained with reinforcement learning for calibrated decisions (RLCD). Instead of generating text verdicts, it answers many typed questions (yes/no probability, multiple choice, ordinal score) about one input in a single API call, each answer carrying a calibrated probability.

How well does Jev detect alignment failures according to this paper?

With one generic yes/no question, Jev ranks ten failure types (sycophancy, jailbreaks, deception, prompt injection, hallucination, privacy violation, social bias, reward hacking, concealing uncertainty, power seeking) with a median AUROC of 0.886 zero-shot across 31 benchmarks, matching LLM-judge scorers at roughly 63 times lower cost.

Is Jev's probability output actually calibrated?

Only in aggregate: pooled across benchmarks its reliability curve is near-diagonal (ECE 0.047), but the median per-benchmark ECE is 0.168 versus 0.074 expected under perfect calibration, so the paper recommends fitting a decision threshold on about ten labelled items before using Jev as a flagger.

Where can I find the code and data for RLCDAlignBench?

At github.com/sumleo/RLCDAlignBench, including detection instances, cached Jev responses and rescoring scripts, so every reported metric can be recomputed offline without any API calls.

About this review

This is an AI-generated preliminary review by Evolve.Pub, produced from the openly available text of the paper. It is not peer review and does not represent the authors' views. The canonical record of the paper is at the publisher link above.

  • Text extraction omitted parts of §4.1-4.2, Appendices B-E and G-J, and some tables/figures; per-question wording details and Figure 3 could not be inspected.
  • Jev's RLCD training is documented only via vendor documentation (TypeSafe AI, 2026); the paper contains no independent description of the training procedure.
  • Review based on arXiv v1 (2609.29429, 24 Sep 2026), under review at ICLR 2027; numbers may change in a camera-ready version.

Go deeper on this paper

Wrote a paper? Stress-test it before reviewers do.

Upload your manuscript for the same structured scrutiny — reasoning, statistics, evidence, figures, and reproducibility.

Scan your paper
Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures | Evolve.Pub