Sun, Yuhao, Xu, Zhuoer, Cui, Shiwen, Yang, Kun, Yu, Lingyun, Zhang, Yongdong, Xie, Hongtao · Oct 2, 2025
arXiv: UpSafe$^\circ$C: Upcycling for Controllable Safety in Large Language Models
Markdown · JSON · Original source
The authors of UpSafe$^\circ$C propose changing how safety is built into : rather than relying only on static alignment, their framework adds safety components that can be adjusted during use. It identifies safety-critical layers and upcycles them into a sparse (MoE) structure. A router selectively activates the model’s original MLPs or added safety experts, while a two-stage SFT strategy aims to strengthen safety discrimination without losing general capabilities. A safety temperature allows adjustment of the trade-off between safety and utility at inference . The authors report improvements against harmful and inputs across multiple , base models, and model scales, alongside competitive general-task performance. They also say safety temperature provides fine-grained control over the trade-off. The paper’s central idea is to make safety modular and adjustable, not just a fixed property set during training. The abstract does not provide benchmark names or detailed results, so the scale and conditions of the reported gains cannot be assessed from this evidence alone.
Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.
Original source
cs.AI · Article
Source details
Original source date: Oct 2, 2025 (2025-10-02).
Date basis: Date basis not provided.
Added to Escape Meridian: 2026-11-10T02:54:26.654Z. First observed: 2026-11-05T05:09:32.296Z. Retrieved: 2026-11-10T02:53:06.963Z.
Referenced by
Recorded citations and public file attachments. A reference alone does not establish agreement or influence.
No public references recorded here yet.
Limits
The available evidence is the paper’s abstract; it does not give names, detailed results, or the conditions needed to assess the reported improvements. The abstract reports competitive general-task performance but does not provide detailed results showing how the safety-utility trade-off changes across settings.
Open question
How do the reported safety and general-task results vary across the , base models, and model scales tested?
Source-stated
The authors propose UpSafe$^\circ$C, a framework that upcycles safety-critical layers into a sparse Mixture-of-Experts structure, with a router selecting original MLPs or added safety experts.
identifies safety-critical layers and upcycles them into a sparse Mixture-of-Experts (MoE) structure, where the router acts as a soft guardrail that selectively activates original MLPs and added safety experts.
Source-stated
The authors introduce a two-stage SFT strategy and a safety temperature mechanism, which they say allows adjustment of the safety-utility trade-off at inference time.
we introduce a safety temperature mechanism, allowing dynamic adjustment of the trade-off between safety and utility.
Source-stated
The authors report safety improvements against harmful and jailbreak inputs, with competitive performance on general tasks across multiple benchmarks, base models, and model scales.
Experiments across multiple benchmarks, base model, and model scales demonstrate that UpSafe$^\circ$C achieves robust safety improvements against harmful and jailbreak inputs, while maintaining competitive performance on general tasks.
Source and contributor context
Sun, Yuhao, Xu, Zhuoer, Cui, Shiwen, Yang, Kun, Yu, Lingyun, Zhang, Yongdong, Xie, Hongtao · Article author
These are credits stated by the source; they do not establish a profile match or authorship of every passage.
Source media
No suitable media was found by the supported page extraction.
Terms and references
Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.
Large language model
A language model with many learned numerical settings, used to process and generate language.
Mixture of experts
A model design that sends each input to a few specialized sub-networks instead of the whole model, which saves computation.
Jailbreak
A prompt written to trick an AI system into ignoring its safety rules.
Benchmark
A defined set of tests used to compare systems. Results depend on the tasks and measures selected.
arXiv
arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.
TIME
TIME is a news magazine publishing reporting on world affairs, business, technology and the workers behind digital services.
Editorial provenance
Version 1. Publication ID: 70cb5308-ca90-472c-8301-7673e26a35b6.
Prepared by gpt-6-luna; grounding review by gpt-6-luna.
Source check: uncertain by anthropic/claude-opus-5.5 on 2026-11-10T02:54:26.654Z. This checks fidelity to the source, not whether its claims are independently true.
Editorial selection: accept; reasons: material_development.
Observation: f9ddea8192741055d5987347eb56c7616fef1c881c3174ff0f5b0d86fba8dc4c. Source text hash: 3ed53aa86cde9586939c040eea68db6190da4da22740939147557bec4df77f4d.
Revision and source-check history
Version 1 · 2026-11-10T02:54:26.654Z
arXiv: UpSafe$^\circ$C: Upcycling for Controllable Safety in Large Language Models
The authors of UpSafe$^\circ$C propose changing how safety is built into : rather than relying only on static alignment, their framework adds safety components that can be adjusted during use. It identifies safety-critical layers and upcycles them into a sparse (MoE) structure. A router selectively activates the model’s original MLPs or added safety experts, while a two-stage SFT strategy aims to strengthen safety discrimination without losing general capabilities. A safety temperature allows adjustment of the trade-off between safety and utility at inference . The authors report improvements against harmful and inputs across multiple , base models, and model scales, alongside competitive general-task performance. They also say safety temperature provides fine-grained control over the trade-off. The paper’s central idea is to make safety modular and adjustable, not just a fixed property set during training. The abstract does not provide benchmark names or detailed results, so the scale and conditions of the reported gains cannot be assessed from this evidence alone.
Original source
cs.AI · Article
Source details
Original source date: Oct 2, 2025 (2025-10-02).
Date basis: Date basis not provided.
Added to Escape Meridian: 2026-11-10T02:54:26.654Z. First observed: 2026-11-05T05:09:32.296Z. Retrieved: 2026-11-10T02:53:06.963Z.
Limits
The available evidence is the paper’s abstract; it does not give names, detailed results, or the conditions needed to assess the reported improvements. The abstract reports competitive general-task performance but does not provide detailed results showing how the safety-utility trade-off changes across settings.
Open question
How do the reported safety and general-task results vary across the , base models, and model scales tested?
Source-stated
The authors propose UpSafe$^\circ$C, a framework that upcycles safety-critical layers into a sparse Mixture-of-Experts structure, with a router selecting original MLPs or added safety experts.
identifies safety-critical layers and upcycles them into a sparse Mixture-of-Experts (MoE) structure, where the router acts as a soft guardrail that selectively activates original MLPs and added safety experts.
Source-stated
The authors introduce a two-stage SFT strategy and a safety temperature mechanism, which they say allows adjustment of the safety-utility trade-off at inference time.
we introduce a safety temperature mechanism, allowing dynamic adjustment of the trade-off between safety and utility.
Source-stated
The authors report safety improvements against harmful and jailbreak inputs, with competitive performance on general tasks across multiple benchmarks, base models, and model scales.
Experiments across multiple benchmarks, base model, and model scales demonstrate that UpSafe$^\circ$C achieves robust safety improvements against harmful and jailbreak inputs, while maintaining competitive performance on general tasks.
Source and contributor context
Sun, Yuhao, Xu, Zhuoer, Cui, Shiwen, Yang, Kun, Yu, Lingyun, Zhang, Yongdong, Xie, Hongtao · Article author
These are credits stated by the source; they do not establish a profile match or authorship of every passage.
Source media
No suitable media was found by the supported page extraction.
Terms and references
Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.
Large language model
A language model with many learned numerical settings, used to process and generate language.
Mixture of experts
A model design that sends each input to a few specialized sub-networks instead of the whole model, which saves computation.
Jailbreak
A prompt written to trick an AI system into ignoring its safety rules.
Benchmark
A defined set of tests used to compare systems. Results depend on the tasks and measures selected.
arXiv
arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.
TIME
TIME is a news magazine publishing reporting on world affairs, business, technology and the workers behind digital services.
Editorial provenance
Version 1. Publication ID: 70cb5308-ca90-472c-8301-7673e26a35b6.
Prepared by gpt-6-luna; grounding review by gpt-6-luna.
Source check: uncertain by anthropic/claude-opus-5.5 on 2026-11-10T02:54:26.654Z. This checks fidelity to the source, not whether its claims are independently true.
Editorial selection: accept; reasons: material_development.
Observation: f9ddea8192741055d5987347eb56c7616fef1c881c3174ff0f5b0d86fba8dc4c. Source text hash: 3ed53aa86cde9586939c040eea68db6190da4da22740939147557bec4df77f4d.
uncertain · 2026-11-10T02:54:26.654Z · anthropic/claude-opus-5.5
Publication: 70cb5308-ca90-472c-8301-7673e26a35b6
attribution — pass: The proposal, method, experiments and conclusions are consistently attributed to the paper's authors (Yuhao Sun et al.) on arXiv. Reported results are framed as what the authors report or say, not as established fact.
Authors:Yuhao Sun, Zhuoer Xu, Shiwen Cui, Kun Yang, Lingyun Yu, Yongdong Zhang, Hongtao Xie
summary — uncertain: The summary is faithful, but its central mechanism is hard for non-specialists to follow. Upcycling, sparse Mixture-of-Experts, router, MLPs, two-stage SFT, safety temperature and jailbreak are used without plain-language gloss; tooltips are needed for SFT, MLPs and upcycling. The title shows raw LaTeX (UpSafe$^\circ$C) instead of a readable name. The summary omits the abstract's framing of the router as a soft guardrail. It also never says in plain terms what the safety-utility trade-off means for users. Smallest repair: render the name as UpSafe°C and add one plain clause on the trade-off. The question is substantive and follows from the evidence.
where the router acts as a soft guardrail that selectively activates original MLPs and added safety experts
date — pass: The originalPublished date of 2025-10-02 matches the v1 submission date. The later v2 revision and feed dates are correctly not used.
[Submitted on 2 Oct 2025 (v1), last revised 4 Nov 2026 (this version, v2)]
support — pass: All claims match the abstract, including the MoE upcycling, the router, two-stage SFT, safety temperature, safety improvements and competitive general performance. The static-to-dynamic framing is grounded in the source. The limitations correctly note that the abstract lacks benchmark details. The reading invents no benefits or costs.
Our results highlight a new direction for LLM safety: moving from static alignment toward dynamic, modular, and inference-aware control.
media — pass: The selected media is the verified arXiv abstract page for this paper. It is the direct original source.
Challenge or correct this reading
Send a correction or an opposing source with this reading’s URL. Disagreement and uncertainty can remain unresolved.
A language model with many learned numerical settings, used to process and generate language.
Definition referenceA model design that sends each input to a few specialized sub-networks instead of the whole model, which saves computation.
Definition referenceTIME is a news magazine publishing reporting on world affairs, business, technology and the workers behind digital services.
Explore TIMEA prompt written to trick an AI system into ignoring its safety rules.
Definition referenceA defined set of tests used to compare systems. Results depend on the tasks and measures selected.
Definition referencearXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.
Explore arXivA defined set of tests used to compare systems. Results depend on the tasks and measures selected.
Definition referenceA defined set of tests used to compare systems. Results depend on the tasks and measures selected.
Definition referenceA language model with many learned numerical settings, used to process and generate language.
Definition referenceA model design that sends each input to a few specialized sub-networks instead of the whole model, which saves computation.
Definition referenceTIME is a news magazine publishing reporting on world affairs, business, technology and the workers behind digital services.
Explore TIMEA prompt written to trick an AI system into ignoring its safety rules.
Definition referenceA defined set of tests used to compare systems. Results depend on the tasks and measures selected.
Definition referencearXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.
Explore arXivA defined set of tests used to compare systems. Results depend on the tasks and measures selected.
Definition referenceA defined set of tests used to compare systems. Results depend on the tasks and measures selected.
Definition reference