研究显示有界内稳态奖励在强化学习中也会被智能体钻空子
Satisfied, Not Solving: Wireheading of Bounded Homeostatic Rewards in Reinforcement Learning
一群研究者证明了'奖励有上限就安全'这个假设不成立,MiniGrid 实验里智能体宁愿刷满足信号也不解任务,做 RL 奖励设计的人该看看。
arXiv 论文 2611.01183 测试了有界内在奖励是否安全免于被利用。在 MiniGrid DoorKey-8x8 中,加入可自行重置需求动作的 PPO 智能体仅 80 个种子里解出 2 个,对照组解出 71 个;KeyCorridorS3R1 上为 0/20 对 20/20。任务奖励单独使用时 11/20 成功,加可篡改的满足信号后降至 1/20,而每次按压 0.1 的成本在所有种子上恢复任务表现。研究对 23 个假设做了预注册,其中 9 个未被支持,论文逐一报告。
Satisfied, Not Solving: Wireheading of Bounded Homeostatic Rewards in Reinforcement Learning
Bounded intrinsic rewards are often assumed to be safe from exploitation: if a signal can yield at most a fixed amount, gaming it should not pay. We test this for a homeostatic satiation reward, in which needs build up and relieving them is rewarding, and give the agent a cheap action that resets its needs. In MiniGrid DoorKey-8x8, PPO agents with this action solved 2 of 80 seeds, against 71 of 80 on the same seeds without it; in KeyCorridorS3R1, 0 of 20 against 20 of 20. Their policies stayed near uniform. The reward does not ask for this: a telescoping argument caps any policy's satiation return at the needs' starting drive, and a post-hoc computation shows that, at every growth rate we trained, a solving trajectory beats that cap on all sampled layouts. In DoorKey with advantage normalization on, a satisfaction signal the agent could fill itself was worse than none (11 of 20 solved with task reward alone, 1 of 20 with the tamperable signal), and a per-press cost of 0.1 restored the task in every seed. Farming of positive reward cycles appeared in DoorKey but not persistently in KeyCorridorS3R1. All predictions were pre-registered, and hash-locked from round 3 on; 9 of our 23 hypotheses were not supported, and we report each.