English

I Can't Believe It's Not Robust: Catastrophic Collapse of Safety Classifiers under Embedding Drift

Machine Learning 2026-03-03 v1 Computation and Language

Abstract

Instruction tuned reasoning models are increasingly deployed with safety classifiers trained on frozen embeddings, assuming representation stability across model updates. We systematically investigate this assumption and find it fails: normalized perturbations of magnitude σ=0.02\sigma=0.02 (corresponding to 1\approx 1^\circ angular drift on the embedding sphere) reduce classifier performance from 85%85\% to 50%50\% ROC-AUC. Critically, mean confidence only drops 14%14\%, producing dangerous silent failures where 72%72\% of misclassifications occur with high confidence, defeating standard monitoring. We further show that instruction-tuned models exhibit 20%\% worse class separability than base models, making aligned systems paradoxically harder to safeguard. Our findings expose a fundamental fragility in production AI safety architectures and challenge the assumption that safety mechanisms transfer across model versions.

Keywords

Cite

@article{arxiv.2603.01297,
  title  = {I Can't Believe It's Not Robust: Catastrophic Collapse of Safety Classifiers under Embedding Drift},
  author = {Subramanyam Sahoo and Vinija Jain and Divya Chaudhary and Aman Chadha},
  journal= {arXiv preprint arXiv:2603.01297},
  year   = {2026}
}

Comments

Accepted at the ICBINB: Where LLMs Need to Improve workshop at ICLR 2026. 12 pages and 3 Figures