[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-a-fix-for-drifting-ai-safety-filters-that-skips-retraining":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5024,"a-fix-for-drifting-ai-safety-filters-that-skips-retraining","A Fix for Drifting AI Safety Filters That Skips Retraining","RCV estimates when a safety classifier's call is wrong and fixes it, catching up to 81 percent of missed unsafe content without retraining the model.","A new technique patches safety classifiers after they are already wrong, no retraining required.\n\nResearchers built Regime-Conditional Verification (RCV), a lightweight wrapper that sits on top of an off-the-shelf safety classifier. It reads the classifier's internal representations to estimate the probability that a given prediction disagrees with the deployer's intended policy, then selectively corrects the predictions it flags as likely wrong. The same correctness signal doubles as a drift detector: since it needs no labels, it can flag when live traffic has moved away from what the classifier was trained on. Tested across three off-the-shelf classifiers and two benchmark datasets, RCV improved policy adherence in every combination, catching up to 81 percent of unsafe content the classifiers had been missing.\n\nSafety classifiers usually fail in one of two boring but costly ways: they were trained to enforce someone else's rules, or their accuracy quietly erodes as real-world traffic shifts. RCV treats both as a monitoring-and-correction problem instead of a retrain problem, which matters because retraining is slow, expensive, and hard to justify until something has already gone wrong. In a deployment study built around ten attack campaigns deliberately excluded from RCV's training data, the system still caught every one, and most instances of drift got repaired by updating the correction layer rather than the classifier itself.\n\nThe results come from the paper's own benchmark and a single deployment study, and the 0.81 catch-rate is a ceiling figure, not a typical outcome. The real test is whether wrapper-style patches like this hold up against the next attack campaign nobody has thought of yet.","[\"ai-safety\",\"content-moderation\",\"machine-learning\",\"research\"]","2026-08-17T04:00:00.000Z","2026-08-17T06:07:39.161Z","2026-08-17T06:07:50.998Z","published",null,[],"ai",[26,27,28,29],"ai-safety","content-moderation","machine-learning","research",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2608.14089",0,{"sections":36},[37,41,45,50,55,60,65,70,75,80,85,90,95,100],{"name":38,"slug":24,"count":39,"latest_published_at":40},"AI",3293,"2026-08-20T04:00:00.000Z",{"name":42,"slug":43,"count":44,"latest_published_at":40},"Security","security",435,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",210,"2026-08-19T09:32:27.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",140,"2026-08-19T18:25:42.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",90,"2026-08-19T18:41:02.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Startups","startups",47,"2026-08-19T19:13:46.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]