defense 2026

MOSAIC: Multi-Objective Slice-Aware Iterative Curation for Alignment

Yipu Dou , Wang Yang

0 citations

α

Published on arXiv

2603.18637

Prompt Injection

OWASP LLM Top 10 — LLM01

Key Finding

Improves XGuard safety score from 2.76 to 4.67 under 1M-token budget while maintaining OrBench at 4.41 and IFEval at 3.65

MOSAIC

Novel technique introduced


We study how to allocate a fixed supervised fine-tuning budget when three objectives must be balanced at once: multi-turn safety alignment, low over-refusal on benign boundary queries, and instruction following under verifiable constraints. We propose MOSAIC (Multi-Objective Slice-Aware Iterative Curation for Alignment), a multi-objective framework for closed-loop data mixture search built on a unified L1-L3 evaluation interface. MOSAIC turns slice-level failure profiles into executable data actions, including dataset-level mixture ratios, bucket-level weights, and focus criteria. Under a fixed 1M-token budget and five rounds of independent fine-tuning from the same base model, MOSAIC improves internal XGuard from 2.76 to 4.67 while keeping OrBench at 4.41 and IFEval at 3.65. The final Pareto solution also generalizes better than a random static LoRA baseline on independent attack, over-refusal, and capability tests, suggesting that structured failure diagnosis can serve as a practical control signal for budgeted data construction. Code is available at https://github.com/douyipu/mosaic.


Key Contributions

  • Unified L1-L3 evaluation interface mapping slice-level failures to actionable data allocation decisions
  • Closed-loop data mixture search framework (MOSAIC) optimizing three alignment objectives under fixed token budgets
  • Demonstration that structured failure diagnosis outperforms random static baselines on safety, over-refusal, and instruction-following metrics

🛡️ Threat Analysis


Details

Domains
nlp
Model Types
llmtransformer
Threat Tags
training_time
Datasets
XGuardOrBenchIFEval
Applications
llm safety alignmentinstruction followingover-refusal mitigation