What CAI Changes—and What It Leaves Human

Constitutional AI begins with a deceptively modest question: can a short set of principles generate enough training feedback to shape a capable assistant? The answer supported by the supplied research is yes, if the claim is stated precisely. CAI can turn principles into critiques, revisions, comparisons, preference-model scores, and policy updates; in the reported setup, that process improves measured harmlessness without forcing the assistant into the evasiveness of some earlier systems. This final synthesis reconnects the whole pipeline, weighs what the evidence can and cannot establish, and identifies the human authority that remains at every important boundary.

The complete chain: from specification to policy

The easiest way to see CAI’s contribution is to follow one principle through two connected loops. The first loop changes the examples from which a policy learns. The second changes the reward used to optimize that policy. They share a constitutional idea, but they do not perform the same operation.

The chain starts with a problem inherited from pretraining. A language model learns to predict likely next tokens from a large text distribution. That objective gives it broad capabilities, but it does not directly ask whether a response follows the user’s intent, avoids fabrication, or creates harm. A model can therefore produce fluent language while answering the wrong question, accepting a false premise, or providing assistance that should not be given. The issue is not simply a lack of knowledge. It is that the training objective does not fully specify the behavior expected of a deployed assistant.

RLHF supplies a way to add that missing direction. Human-written demonstrations first teach a supervised policy how an assistant should respond. Human comparisons then train a reward model to predict which candidate response people prefer. PPO adjusts the policy toward higher reward, while a KL penalty keeps it from drifting too far from the supervised policy. An optional pretraining mix helps preserve capabilities that the preference data may not represent. The important architecture is not the acronym; it is the sequence in which judgment becomes examples, examples become a learned score, and the score becomes an optimization target.

CAI changes the source of direct harmlessness feedback inside that architecture. It does not throw away the supervised policy or the preference model. Instead, it uses a helpful-only assistant to generate a response to a red-team prompt, asks the same model to critique that response according to a constitutional principle, and asks it to revise the answer. The revised response becomes supervised training material. Helpful responses are included as well, so that the policy is not trained to equate safety with silence.

The first loop changes the policy’s starting distribution. Before the intervention, a helpful assistant may respond to a harmful prompt in a way that is fluent but unsafe. After constitutional prompting, the training set contains more responses that identify a boundary, avoid dangerous assistance, and, where possible, continue the conversation constructively. The model is not given a formal proof that the response is safe. It is exposed to a different set of examples from which it can learn more useful response tendencies.

The constitution enters this loop as a steering instruction. It tells the model what kind of problem to look for: harmful or illegal assistance, social bias, offensive language, lack of empathy, or overreaction. The critique is a model-generated interpretation of that instruction. The revision is a candidate behavior. The supervised policy is the learned distribution that results after many such examples. These objects should not be collapsed. A principle is not a critique, a critique is not a revision, and a revised response is not the same thing as a policy that will generalize to every new prompt.

The second loop uses the principle differently. The supervised CAI policy produces two candidate responses to a prompt. A feedback model receives the conversation, the response pair, and a constitutional principle in a multiple-choice format. It chooses which response is more helpful, honest, or harmless. The normalized probabilities of the answer choices become soft targets for preference-model training. The preference model then scores new samples, and PPO uses those scores to update the policy.

This second loop is where a principle becomes a reward proxy. The reward is not the text of the constitution, and it is not a direct human judgment. It is a learned approximation of how the feedback model interpreted many principle-conditioned comparisons.