arXivDaily arXiv每日学术速递 周一至周五更新
​通知:联邦节假日调休:哥伦布日 / 原住民日(Columbus Day / Indigenous Peoples' Day),今日(13日)无更新。
arXiv 2605.16198cs.AIcs.CYcs.LGcs.LO

形式方法与大语言模型交汇:面向高级AI系统合规性的审计、监控与干预

Formal Methods Meet LLMs: Auditing, Monitoring, and Intervention for Compliance of Advanced AI Systems

University of Toronto, Vector Institute(多伦多大学,向量研究所)

Parand A. Alamdari, Toryn Q. Klassen, Sheila A. McIlraith

AI总结:

本文提出结合形式方法与机器学习的审计和监控技术,用于检测AI系统中时间扩展行为约束的违规,实验表明其在检测违规方面优于LLM基方法,且能有效降低LLM代理的违规率。

摘要:

我们探讨了AI治理的一个维度:如何在整个AI开发生命周期中监控和审计AI增强的产品和服务,从预部署测试到部署后的审计。结合形式方法的原则与最先进的机器学习,我们提出技术,使AI增强产品和服务开发者、第三方AI开发者和评估者能够对产品特定的时间扩展行为约束(如安全约束、规范、规则和法规)进行离线审计和在线(运行时)监控,针对黑箱高级AI系统,特别是LLMs。我们进一步提供实用的预测监控技术,如基于抽样的方法,并引入干预监控器,在运行时预判并可能缓解预测的违规。实验结果表明,通过利用线性时序逻辑(LTL)的形式语法和语义,我们提出的方法在检测时间扩展行为约束的违规方面优于LLM基方法;使用我们的方法,即使小模型标注器也能匹配或超越前沿LLM判断者。我们还显示,通过受控实验,LLM的时间推理在事件距离、约束数量和命题数量增加时表现出显著的准确性下降。

英文摘要:

We examine one particular dimension of AI governance: how to monitor and audit AI-enabled products and services throughout the AI development lifecycle, from pre-deployment testing to post-deployment auditing. Combining principles from formal methods with SoTA machine learning, we propose techniques that enable AI-enabled product and service developers, as well as third party AI developers and evaluators, to perform offline auditing and online (runtime) monitoring of product-specific (temporally extended) behavioral constraints such as safety constraints, norms, rules and regulations with respect to black-box advanced AI systems, notably LLMs. We further provide practical techniques for predictive monitoring, such as sampling-based methods, and we introduce intervening monitors that act at runtime to preempt and potentially mitigate predicted violations. Experimental results show that by exploiting the formal syntax and semantics of Linear Temporal Logic (LTL), our proposed auditing and monitoring techniques are superior to LLM baseline methods in detecting violations of temporally extended behavioral constraints; with our approach, even small-model labelers match or exceed frontier LLM judges. Our predictive and intervening monitors significantly reduce the violation rates of LLM-based agents while largely preserving task performance. We further show through controlled experiments that LLMs' temporal reasoning shows a pronounced degradation in accuracy with increasing event distance, number of constraints, and number of propositions.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑