| Pretraining for Safety | RealToxicityPrompts | RedPajama test | XStest safe | XStest unsafe | Toxigen |
|---|---|---|---|---|---|
| Llama Base | 88.1 | 68.0 | 85.2 | 39.5 | 80.1 |
| Trained on RedPajama | |||||
| Llama Pretrain Baseline | 87.1 | 67.4 | 87.6 | 35.0 | 82.0 |
| Self-Improving Pretraining | 96.0 | 93.4 | 88.4 | 49.0 | 93.1 |
| Method / Ablation | Generation Quality | Standard Evals | Safety Evals | |
|---|---|---|---|---|
| Std. Prefix | Unsafe Prefix | (Avg) | (Avg) | |
| Llama Base | 50.0 | 50.0 | 47.6 | 76.9 |
| Llama Pretrain Baseline | 54.5 | 52.6 | 47.9 | 75.5 |
| Training without a Judge | ||||
| SFT (rewrite) | 52.7 | 50.6 | 48.4 | 86.5 |
| SFT (1 rollout) | 2.0 | 0.2 | 29.5 | 99.5 |
| Online DPO (chosen: rewrite, reject:rollout) | 53.6 | 83.1 | 48.8 | 77.7 |
| Self-Improving Pretraining | ||||
| RF-NLL (rollout vs. rewrite) | 49.0 | 51.8 | 48.3 | 85.0 |
| RF-NLL (suffix vs. rewrite vs. 1 rollout) | 50.1 | 51.1 | 48.8 | 84.6 |
| Online DPO (suffix vs. 1 rollout) | 55.7 | 84.7 | 48.4 | 82.5 |
| Online DPO (rewrite vs. 1 rollout) | 60.2 | 87.2 | 48.5 | 81.9 |
| Online DPO (suffix vs 16 rollouts) | 73.6 | 77.7 | 49.1 | 91.1 |
| Online DPO (suffix vs rewrite vs 16 rollouts) | 72.5 | 75.4 | 49.1 | 88.9 |
| Online DPO (suffix as a pivot for 16 rollouts) | 59.6 | 51.9 | 48.8 | 89.0 |
| Online DPO (16 rollouts) | 71.1 | 72.0 | 49.7 | 88.9 |
We report ablation results on the number of rollouts used in online DPO for quality, factuality, and safety training in Figure 9. We generally find improved performance across all benchmarks with an increasing number of rollouts, where we experimented with between 1 and 16 rollouts. We did not experiment past 16 rollouts due to the increased compute required, but we expect further gains.
Furthermore, similar trends can be seen in generation quality and standard evaluations, as shown in Appendix Table 14, where more rollouts lead to better final performance across all benchmarks tested. Detailed standard task results are also given in Appendix Table 15 and Table 16.
As mentioned in subsection 3.1, we experiment with two types of judges: one fine-tuned specifically for a target task such as quality, and another used directly via prompting without training. In Table 7 we compare these two judges when they are used for quality training. We find that the prompted GPT-OSS-120B model generally performs better, but the finetuned Llama judge is not far behind, demonstrating that we can purpose-train a smaller model for this goal. A detailed breakdown of results across standard tasks can be found in Appendix Table 17.
We also experiment with speeding up pairwise quality judgments by instead using a pivot. That is, one generation is selected and then all generations in the training batch are compared only against this pivot.