Safety Mid-Training: Internalizing LLM Safety as a Foundational Capability

According to the abstract, Zhengyue Zhao, Liwei Jiang, Yejin Choi, Chaowei Xiao and colleagues introduce safety mid-training, a stage between pre-training and post-training that develops safety and general reasoning together. They report it cuts average attack success rate by 72% to 81% on three Qwen3 base models while improving general capability.

Why it matters

The same thing, for different readers.

For researchers

The authors treat safety as a capability that shares structure with general reasoning, and report gains that persist through later post-training.

How the finding was reached

In our words, from the source. Weigh the finding by how it was made.

What was done
A mid-training stage using base-model-generated structured documents and reasoning traces from safety and utility prompts, tested on Qwen3-1.7B, 4B and 8B base models.
What it found
The authors report average attack success rate falls 72% to 81% relative to the base models, with general capability also improving and benefits persisting through post-training.
What it does not show
Not stated in the excerpt; the models tested are small.
Status
A preprint: not yet peer reviewed

The record

Questions
Are AI companies putting stronger safeguards into practice?
People
Zhengyue Zhao (Wrote it) · Liwei Jiang (Wrote it) · Yejin Choi (Wrote it) · Chaowei Xiao (Wrote it)
What we read
We have read only the description the publisher gives. No quotations until someone reads the source itself.
Found by
The Radar, run of October 20, 2026, via arxiv-ai-safety-query (tier 1: the source’s own channel or an official record)
Cite this
arXiv, “Safety Mid-Training: Internalizing LLM Safety as a Foundational Capability”, October 19, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-19-safety-mid-training
Our notesLight lane: only the abstract was read, which ends mid-sentence.