MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMs
About
Ensuring the safety of Large Language Models (LLMs) is critical for real-world deployment. However, current safety measures often fail to address implicit, domain-specific risks. To investigate this gap, we introduce a dataset of 3,000 annotated queries spanning education, finance, and management. Evaluations across 14 leading LLMs reveal a concerning vulnerability: an average jailbreak success rate of 57.8\%. In response, we propose MENTOR, a metacognition-driven self-evolution framework. MENTOR performs metacognitive self-assessment, using strategies such as perspective-taking and consequential reasoning to uncover latent model misalignments. The resulting reflections are distilled into dynamic rule-based knowledge graphs, from which retrieved rules are converted into activation-level steering signals to guide internal representations during inference. Experiments demonstrate that MENTOR substantially reduces attack success rates across all tested domains and outperforms existing safety alignment methods. The code and dataset for MENTOR are available at: https://anonymous.4open.science/r/MENTOR-Evo.
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| Safety and Utility Evaluation | Finance | JSR0.004 | 44 | |
| Safety and Utility Evaluation | Management subset | JSR Score0.78 | 44 | |
| Safety and Utility Evaluation | Education subset | JSR65.6 | 44 | |
| Jailbreak defense and Utility evaluation | Implicit risk dataset Education | Jailbreak Success Rate (JSR)6.4 | 30 | |
| Jailbreak defense and Utility evaluation | Implicit risk dataset Finance | Jailbreak Success Rate (JSR)0.4 | 30 | |
| Jailbreak defense and Utility evaluation | Implicit risk dataset Management | Jailbreak Success Rate (JSR)0.8 | 30 | |
| Human Evaluation | Education subset | Win Rate85 | 3 | |
| Human Evaluation | Finance | Win Rate97 | 3 | |
| Human Evaluation | Management subset | Win Rate93 | 3 | |
| Jailbreak Success Rate | AdvBench | -- | 3 |