ALIGNBEAM : Inference-Time Alignment Transfer via Cross-Vocabulary Logit Mixing
About
Domain fine-tuning degrades the safety of large language models: fine-tuned specialists readily comply with harmful prompts framed in domain language. Existing inference-time defenses that mix logits from a safe anchor model require both models to share a vocabulary, which rules them out for the cross-family specialists where safety is most degraded. We present ALIGNBEAM, a training-free method that lifts this restriction by translating anchor logits into the target model's vocabulary token-by-token at each decoding step; a small LLM judge then selects the safest among K candidate continuations. No weights are changed, and the safety-utility trade-off can be tuned at deployment without retraining. Across both cross-vocabulary and same-vocabulary evaluation pairs, ALIGNBEAM substantially raises refusal on adversarial benchmarks while keeping task accuracy and inference overhead within practical bounds. The results show that safety alignment can be transferred between model families at inference time, without touching either model's weights.
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| LLM Inference Efficiency | HarmBench-Standard and AdvBench | Slowdown2 | 8 | |
| Safety Evaluation | HarmBench Std | Refusal Rate80.8 | 6 | |
| Safety Evaluation | HarmBench Ctx | Refusal Rate80.6 | 6 | |
| Safety Evaluation | AdvBench | Ref Rate95.8 | 6 | |
| Safety Evaluation | SORRY-Bench | Ref %65.7 | 6 | |
| Safety Evaluation | WildJB | Reference Rate33.2 | 6 | |
| Benign Over-refusal | OR-Bench Hard | String-match Refusal Rate22.3 | 6 | |
| Benign Over-refusal | JBB (Benign) | String-match Refusal Rate (%)26 | 6 | |
| Harmful Refusal | Harmbench Standard | Refusal Rate (String Match)79.6 | 6 | |
| Harmful Refusal | HarmBench Contextual | String-match Refusal Rate79 | 6 |