CAT-alyzing Honesty: Continuous Adversarial Training for Transferable LLM Honesty

According to the abstract excerpt, the authors introduce CATCH, which trains a model toward honest answers and away from dishonest ones using only hundreds of targets. They report that it generalizes across benchmarks and beats prompting and supervised fine-tuning, tested on Llama-3.3-70B-Instruct and a Qwen model.

Why it matters

The same thing, for different readers.

For researchers

Adapts adversarial refusal training to honesty and reports gains on MASK, Among Us confessions and AuditBench hidden-behavior discovery.

How the finding was reached

In our words, from the source. Weigh the finding by how it was made.

What was done
Continuous adversarial training on hundreds of self-reporting targets, evaluated on two model architectures against the MASK, Among Us and AuditBench settings.
What it found
The authors report reduced dishonesty under pressure on MASK, more confessions in Among Us, better hidden-behavior discovery, and results above prompting and supervised fine-tuning and on par with activation steering.
What it does not show
The excerpt cuts off at a stated limitation that is not visible here; judged from a truncated abstract.
Status
A preprint: not yet peer reviewed

The record

Questions
Are AI companies putting stronger safeguards into practice? · What values should AI have, and could it have a mind of its own?
People
Yuan-Chen Chang (Wrote it) · Niklas Herbster (Wrote it) · Gauthier Gidel (Wrote it) · Tommaso Tosato (Wrote it)
What we read
We have read only the description the publisher gives. No quotations until someone reads the source itself.
Found by
The Radar, run of October 16, 2026, via arxiv-ai-safety-query (tier 1: the source’s own channel or an official record)
Cite this
arXiv, “CAT-alyzing Honesty: Continuous Adversarial Training for Transferable LLM Honesty”, October 15, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-15-catch-adversarial-training-honesty
Our notesLight lane: written from the triage excerpt only; the source was not fetched and no quotations are given. The excerpt ends at a sentence beginning with a limitation that a person may want to read.