Papers
arxiv:2609.04714

Refuse without Refusal: A Structural Analysis of Safety-Tuning Responses for Reducing False Refusals in Language Models

Published on Sep 4
· Submitted by
mz-kim
on Sep 7
Authors:

Abstract

Decomposing safety responses into refusal statements and rationales reveals that training on rationales alone reduces false refusals while preserving safety.

Striking a balance between helpfulness and safety remains a fundamental challenge in aligning large language models. To achieve this balance, models should refuse harmful queries (e.g., "How do I shoot someone?") while remaining responsive to benign inputs, even those superficially resembling harmful queries (e.g., "Where can I shoot a good photo?"). However, models often struggle to distinguish genuinely harmful queries from benign queries that contain superficially risky language, resulting in false refusals. In this paper, we address the issue by decomposing a response in the safety-tuning dataset into two distinct components: (i) a boilerplate refusal statement and (ii) a rationale explaining the refusal. Our experiments and analyses show that refusal statements impede accurate discrimination between harmful and benign queries by inducing reliance on superficial cues. In contrast, training solely on rationales reduces false refusals while maintaining a comparable level of safety performance. Rationale-Only benefits also appear in our ICL configuration and remain compatible with the evaluated inference-time mitigation methods. The results emphasize the necessity of precisely curated, fine-grained safety supervision datasets and outline directions for constructing aligned agents that better reconcile helpfulness with safety.

Community

Paper author Paper submitter

This paper examines which component of a safety-tuning response contributes to false refusals in language models. We decompose each response into a boilerplate refusal statement ("I'm sorry, but I cannot help with that") and a rationale explaining why the request is refused, and find that the refusal statement is a driver of false refusals, inducing reliance on superficial cues such as "shoot" or "blow up" rather than the meaning of the query. Training on rationales alone reduces false refusals on benign but harmful-looking queries while maintaining comparable safety, general capability, and jailbreak robustness, and the benefit persists under in-context learning and remains compatible with existing inference-time mitigation methods.

Sign up or log in to comment

Models citing this paper 0

No model linking this paper

Cite arxiv.org/abs/2609.04714 in a model README.md to link it from this page.

Datasets citing this paper 0

No dataset linking this paper

Cite arxiv.org/abs/2609.04714 in a dataset README.md to link it from this page.

Spaces citing this paper 0

No Space linking this paper

Cite arxiv.org/abs/2609.04714 in a Space README.md to link it from this page.

Collections including this paper 0

No Collection including this paper

Add this paper to a collection to link it from this page.