# Model-driven feedback could amplify alignment failures

Anthropic, DeepMind and Google Brain are all working on strategies to train language models on their own outputs. For a brief summary of the work so far:

1.  [Red Teaming Language Models with Language Models](https://arxiv.org/pdf/2202.03286.pdf) (Perez et al., 2022). One model prompts another, seeking to expose undesirable generations. A third model classifies those generations as undesirable, creating a dataset of behaviors to be avoided. 
2.  [Constitutional AI](https://www.anthropic.com/constitutional.pdf) (Bai et al., 2022). Begins with the red-teaming setup described in Perez et al., 2022. Then fine-tunes on that dataset by either (a) critiquing and rewriting the response and training the generator to imitate that output with supervised fine-tuning, or (b) choosing the better of two responses to train a preference model, and training the generator with RL on the preference model. 
3.  [Large Language Models Can Self-Improve](https://arxiv.org/pdf/2210.11610.pdf) (Huang et al., 2022). Fine-tunes a model on its own "high confidence" outputs. High-confidence outputs are identified by asking the model to answer the same question many times, using chain-of-thought each time, and fine-tuning on outputs that are agreed upon by a majority of responses. 

I'd like to point out a simple failure mode of this approach: Failures of alignment and capability in the original model could be amplified by fine-tuning on its own outputs. Empirically, recent experiments on language models have found more benefit than harm in model-driven feedback. But that might not always be the case. 

This recent work is an extension of [weak supervision](https://en.wikipedia.org/wiki/Weak_supervision), a technique dating back to at least [1963](https://ieeexplore.ieee.org/document/1053799) which has been successful in applications such as [image classification](https://proceedings.neurips.cc/paper/2019/file/1cd138d0499a68f4bb72bee04bbec2d7-Paper.pdf) and [protein folding](https://www.nature.com/articles/s41586-021-03819-2). This literature has long acknowledged the possibility of amplifying a model's existing shortcomings via self-training:

*   [Semi-Supervised Learning of Mixture Models](https://www.aaai.org/Papers/ICML/2003/ICML03-016.pdf) (Cozman et al., 2003) analyze cases where weak supervision will help or hurt a maximum likelihood estimator. 
*   [Pseudo-Labeling and Confirmation Bias in Deep Semi-Supervised Learning](https://arxiv.org/pdf/1908.02983.pdf) (Arazo et al., 2020) provide evidence that naive implementations of weak supervision can hurt performance on image classification tasks. They show that data augmentation and scaling can reduce these harms. 
*   [An Overview of Deep Semi-Supervised Learning](https://arxiv.org/pdf/2006.05278.pdf) (Ouali et al., 2020) Section 1.3 lays out key assumptions behind weak supervision, and discusses state of the art methods.

One particularly dangerous failure mode would be the classic deceptive alignment story, in which a model with long-term goals gains awareness of its training process and subverts it. With a model-driven feedback approach, there would be more of an opportunity to hide misaligned behavior during training. Models used for critiques or oversight could also engage in gradient hacking, putting their goals into the generator model. 

A better approach might keep humans at the center of the feedback process. This is slower and might be less accurate in some cases, but could potentially avoid the worst failures of model-driven feedback. A popular middle ground uses model-assisted feedback methods: 

1.  [AI Written Critiques Help Humans Notice Flaws](https://openai.com/blog/critiques/) (Saunders et al., 2022). GPT provides critiques of its own outputs. This version still has a human make the final judgement, limiting the influence of the model over its own training data. 
2.  [Measuring Progress on Scalable Oversight for Large Language Models](https://arxiv.org/pdf/2211.03540.pdf) (Bowman et al., 2022). Finds that humans with access to a chatbot assistant are better able to answer factual questions than either the chatbot alone or humans unaided by AI. 

Model-driven feedback has achieved impressive results on [scalable oversight](https://arxiv.org/pdf/1811.07871.pdf), especially compared to the [empirical](https://arxiv.org/abs/2210.10860) and [theoretical](https://www.alignmentforum.org/posts/PJLABqQ962hZEqhdB/debate-update-obfuscated-arguments-problem) challenges with debate. But in the future, the old adage might hold true: Garbage in, garbage out.