Skip to content

Safin-1: Safety from Within through Memory-Native State Evolution

Aug 2026 · 0 citations · 123 references
Computer Science

TL;DR

The routed-state interface unifies contextual memory and persistent capability adaptation within the model's native computation, reframing memory from a passive record of prior context into an active substrate for maintaining and evolving model behavior.

Abstract

Long-horizon complex tasks require foundation models to accumulate information, maintain internal states, and adapt over extended interactions. Safety should be an intrinsic property of the model itself, rather than a behavioral constraint relying solely on external safeguards or post-hoc alignment such as supervised fine-tuning. This motivates Safety from Within, where safety-relevant capabilities are represented and invoked through the model's native computation. We present Safin-1, a family of foundation models realizing this principle through memory routing and state evolution. Safin-1 is built on Memory-Anchor Routing across Context History (MARCH), a network architecture that maintains structured memory states and selectively retrieves relevant historical information through content-conditioned routing. It supports test-time adaptation of persistent capability states without repeatedly modifying the backbone, enabling controlled specialization over a shared foundation. We investigate this interface on downstream safety tasks through a Safety State, demonstrating effective state-based adaptation with substantial safety improvements. More broadly, the routed-state interface unifies contextual memory and persistent capability adaptation within the model's native computation, reframing memory from a passive record of prior context into an active substrate for maintaining and evolving model behavior. Evaluations across general capabilities, long-context understanding, retrieval, and efficiency further validate Safin-1. These findings provide a path toward safety as a state-native and adaptively maintainable capability. This work is only an initial architectural exploration of Safety from Within, and substantial further work is needed to realize this broader vision.

View source

Similar papers

#artificial intelligence Preprint Oct 2026

Harmful SFT Leaves a Continuous Trace in LLM Checkpoint Updates

TRACE is introduced, a weights-only auditing method that localizes an unknown checkpoint update relative to frozen harmful and non-harmful reference prototypes and converts this geometry into a continuous harmful-objective score.

Zi-Qun Bao, Xin-Yu Zhang, Yu-Chen Shao et al. · 0 citations
#artificial intelligence Review Sep 2026

Safety in Self-Evolving Agents: A Survey

SAVER is introduced, a transition-centered framework in which Substrate locates reusable influence, Adaptation captures how it changes, Violation identifies compromised safety attributes, Exposure marks where failures become observable, and Response assesses containment, repair, or revocation.

Jia-Hao Chen, Zhou Feng, Ou-Bo Ma et al. · 1 citation
#artificial intelligence Preprint Oct 2026

Decoupling Memory from Context: Structured Memory for Token-Efficient Test-Time Continual Learning

This work introduces a unified formulation of context optimization and shows that an agent memory system update can be interpreted as an optimization update procedure over the model's context, and proposes GraphMemory, a lightweight graph-based memory that accumulates, refines, organizes, and connects reusable strategi...

Yehya Farhat, Michael Desmond, Anastasios Kyrillidis · 0 citations
Conference Aug 2026

MAM-PT: A Memory-Augmented Middleware for Enhancing Automated Penetration Testing

LLM-based penetration-testing agents execute multi-step security tasks through tool use and environment feedback, but flat interaction histories can become noisy, unstructured, and difficult to reuse in subsequent decisions. To address this problem, we propose MAM-PT, a memory-augmented middleware that organizes agent...

Wei-Hao Sun, Wen-Hao Wang, Wan-Li Wu et al. · 0 citations
#artificial intelligence Preprint Oct 2026

SafeEvo: Deciphering the Safety Alignment Mechanism and Evolution in Language Models

SafeEvo first applies an optimization-based extraction algorithm to identify weak refusal circuits in pretrained base LLMs that can independently express refusal behavior and traces the evolution of refusal circuits across successive alignment checkpoints and finds that their structures change progressively, suggesting...

Miao Yu, Hao-Hao Huang, Luiza S. B. Yuan et al. · 0 citations
Preprint Sep 2026

Runtime-Independent Persistent Agents: Preserving Identity, Memory, and Code Across Models, Harnesses, and Servers

A runtime-independent architecture that separates a continuity-bearing substrate $P_t=(I_t,M_t,B_t)$ from replaceable execution and interaction bindings is presented, which support mechanical continuity for the tested deployments and bounded workflows.

Zhe Zhao, Roy Zhao Independent Researcher, P. G. A. S. O. C. ScienceEngineering et al. · 2 citations · ⚡1

Related blog posts

Microsoft Research Blog Nov 3, 2026

Learn the rules: The hacker mindset

Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility—and an understanding of the rules. The post Learn the rules: The hacker mindset appeared first on Microsoft Research.

Google DeepMind Blog Nov 3, 2026

Agentic cheminformatics with Google Antigravity

Learn how Google Antigravity and our Cheminformatics Skills accelerate drug discovery workflows, search compounds, and propose novel rigidified macrocycles.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.