What we'll cover
Constitutional AI is one instance of a broader move: replace the human labeller with a model. This sub-session generalises it to plain RLAIF, looks at the evidence that AI feedback can match human feedback (Lee et al.), and at self-rewarding models that judge themselves (Yuan et al.). Then it turns critical. Automating the feedback introduces failure modes that human labelling did not have (self-preference, inherited sycophancy, over-optimising an AI proxy, and the risk of a closed data loop) and forces the session's central question: does AI feedback escape the oversight ceiling of 6.4, or move it somewhere harder to see?
Plain RLAIF
RLAIF is the RLHF pipeline of Session 6 with one substitution: an LLM judge in place of the human labeller.
Strip Constitutional AI of its self-critique phase and you are left with the general recipe. Sample response pairs, have a model rank them, train a reward model on those rankings, optimise the policy against it. The constitution, if present, is the rubric handed to the judge; without one, the judge is prompted with a task description ("which response is more helpful and honest?"). The two refinements from 7.2 are both in play, and one originates here rather than in Constitutional AI: chain-of-thought reasoning before the judgement, Bai et al.'s device, raises agreement with humans; and scoring each pair in both orders to cancel position bias is the fix Lee et al. (2023, next section) introduced. One variant drops the separate reward model entirely: direct RLAIF asks the LLM judge for a score on every response during RL and uses that as the reward, trading the cost of querying a large model in the loop for freedom from a reward model that can go stale.
Does AI feedback match human feedback?
Lee et al. (2023) ran the head-to-head that Constitutional AI never did, and the answer is broadly yes.
On three tasks (summarisation, helpful dialogue, harmless dialogue) they compared RLAIF against RLHF with human evaluators judging the output. RLAIF and RLHF were preferred over the supervised baseline at statistically indistinguishable rates (71% vs 73% on summarisation, 63% vs 64% on helpful dialogue). On harmlessness, RLAIF came out ahead, scoring 88% harmless against RLHF's 76%. Head-to-head, humans preferred the two equally. For a method that removes human labelling from the loop, "as good as, sometimes better" is a strong result.
AI agreement and the human noise floor
Why should a model's preferences be any good? Because on these tasks the judge already agrees with humans about as often as humans agree with each other. Lee et al.'s best AI labeller reached roughly 78% agreement with the human-preferred option on summarisation, and human inter-annotator agreement on the same data is about 73–77%. Once the AI judge is inside the band of human disagreement, asking it to be "more accurate" is asking it to beat a target that humans themselves cannot agree on. That is what "AI feedback matches human feedback" comes to here: on these tasks the human signal was never clean enough for "more accurate" to mean much.
The result that rules out the easy explanation is the same-size one. You might think RLAIF only works because a big, capable labeller is distilling its knowledge into a smaller policy. So Lee et al. ran it with the labeller the same size as the policy: it still improved over the baseline (68% preferred over the supervised model). They pushed further to a case where the labeller and the initial policy were the exact same checkpoint (a model judging responses from itself) and still saw gains. That rules out distillation from a stronger teacher: the model is bootstrapping on its own judgement, which sets up the next idea.
Self-rewarding: the model as its own teacher
If a model can judge its own outputs, why not let it generate its own training signal and iterate?
Yuan et al. (2024) take the bootstrapping to its conclusion. A single model plays two roles: it generates candidate responses, and it scores them by prompting itself as an LLM-as-a-judge. The highest- and lowest-scored responses form a preference pair, the model is trained on those pairs with DPO (the closed-form preference objective from 6.3), and the whole loop repeats, each round producing a model that is both a better responder and a better judge. The motivation is stated bluntly in the paper's first line: to reach superhuman agents, "future models require superhuman feedback", and a frozen, human-trained reward model can never provide it because it is capped at human performance. Across three iterations a fine-tuned Llama-2-70B climbed the AlpacaEval 2.0 leaderboard past Claude 2, Gemini Pro, and GPT-4 0613.
The authors' own cautions
The paper is careful, and you should be too. The gains were shown over three iterations in one setting; the authors expect the effect to saturate, and flag that response length grew across iterations, while longer answers are known to inflate both human and AI preference scores, so some of the "improvement" may be the judge rewarding verbosity. A model that improves by judging itself is also a model with no external check on the direction it improves in. The mechanism that makes it powerful (closing the loop between generating and judging) is the mechanism the rest of this page worries about.
The failure modes of AI feedback
Removing the human removes a check. Four failure modes follow.
Self-preference bias
An LLM judge tends to over-rate its own outputs. The important subtlety, from Wataoka et al. (2024): the driver is not self-recognition. The judge prefers text with low perplexity (text it finds familiar, that it would have been likely to write) regardless of whether it generated it. Because a model's own outputs are the low-perplexity texts, self-preference falls out as a side effect. GPT-4 showed the strongest effect of the models tested. The consequence for RLAIF: a self-judging loop systematically rewards its own style, narrowing the model toward whatever it already finds fluent.
Inherited and amplified sycophancy
Sharma et al. (2023) showed that human preference data already rewards agreement: responses that flatter the user or concede to pushback are preferred even when they are wrong (6.4). An AI judge trained to mimic human preferences inherits this bias, and a self-rewarding loop can amplify it: the model learns that agreeable answers score well, judges accordingly, and trains on its own judgement. The preference signal rewards telling people what they want to hear, and automating it does nothing to fix that.
Over-optimising an AI proxy
Gao et al. (2022) measured how policies over-optimise a reward model: push too hard and true quality falls even as the proxy score climbs (6.4). That work used a gold reward model as ground truth. With AI feedback the proxy is itself model-generated, so the gap between proxy and truth can be both larger and less predictable, and you have lost the human signal that would have told you the proxy had drifted. The KL leash of 6.3 still helps, but it is restraining the policy from exploiting an even softer target.
The closed loop: model collapse
Train models on data generated by models, across generations, and quality can degrade: rare patterns vanish and the distribution narrows, a phenomenon Shumailov et al. (2024, Nature) call model collapse. Treat this as an argument by analogy, not a demonstrated property of any single RLAIF run: it is a warning about what closing the data loop tends to do, and self-rewarding training closes that loop. Whether a given scheme collapses depends on how much fresh signal still enters from outside.
Escape, or relocate?
A human-bounded reward model was capped at human judgement. An AI-bounded one is capped at the feedback model's judgement: better than a non-expert in some places, worse in others, and capable of being wrong in correlated, systematic ways that a diverse crowd of humans would not be. Swapping the labeller does not, on its own, let you supervise a task neither the human nor the model can evaluate; it moves the ceiling from "what a human rater can tell" to "what the feedback model can tell", which is a different ceiling, not the absence of one. Whether AI feedback can ever raise the ceiling (supervise a model more capable than its supervisor) is an open empirical question that depends on the capability in play, and it is the subject of the scalable-oversight menu (debate, amplification, recursive reward modelling, weak-to-strong) in Session 8.1. Self-rewarding is one bet that the loop can climb; the failure modes above are the reasons to hold that bet at a calibrated credence.
The African lens
The tilt 7.1 flagged can now be given a size. Lee et al.'s labeller agrees with human raters about 78% of the time at its best, and that figure is measured in English; it is not a constant of the method but a property of a model reading the language it knows best. Since AI feedback inherits the base model's competence profile, the cheap and infinitely scalable safety signal now replacing human labour is least trustworthy where human labour is scarcest too. A self-judging loop in isiZulu compounds two weaknesses at once, a weaker generator and a weaker judge, each unable to catch the other. What that costs the people on the other end is 7.4.
Questions to bring to class
- An AI judge agrees with humans about as often as humans agree with each other (~78% vs ~73–77%). Does that make it a good judge, or only an unfalsifiable one on these tasks?
- The same-size and same-checkpoint results rule out "it's just distillation". What do they show, and what would model collapse predict if you iterated them indefinitely?
- Wataoka et al. find self-preference is driven by perplexity, not self-recognition. Why does that mechanism make the bias harder to remove than if the model were recognising its own text?
- Give a concrete task where AI feedback plausibly raises the oversight ceiling, and one where it cannot. What distinguishes them?
- Self-rewarding closes the generate–judge loop on purpose. Name one external source of fresh signal you would insist on keeping in the loop, and why.
Readings
Mandatory readings
• Lee et al. (2023), "RLAIF vs. RLHF: Scaling RL from Human Feedback with AI Feedback" (arXiv:2309.00267): cite the published v3 (ICML 2024); its section numbering differs from the 2023 v1. Read §2.3 for how "AI Labeler Alignment" is defined, §4.1 for the head-to-head, §4.2 for the same-size and same-checkpoint results, and §4.4 for the table the alignment figures come from. ≈1,400 words.
• Yuan et al. (2024), "Self-Rewarding Language Models" (arXiv:2401.10020): read §1 for the "superhuman feedback" motivation, then the opening of §2 and §2.4, which states the self-alignment algorithm end to end. ≈1,050 words.
Total mandatory load: ≈2,450 words.
Optional readings
• Lee et al. (v3), §2.1, §4.3 and §4.5 (≈1,000 words): the labelling prompts in full, direct RLAIF, and the ablation on labeller size. Appendix B is the position-bias study the 7.6 lab reproduces.
• Yuan et al., §2.1–2.3 and §3.2 (≈2,200 words): the components of the loop one by one, and the iteration-by-iteration results.
• Anthropic (2026), "System Card: Claude Fable 5 & Claude Mythos 5" (9 June 2026; anthropic.com/claude-fable-5-mythos-5-system-card, a 317-page PDF): the failure modes argued for on this page, documented instead in a production system. Four scoped sections, ≈4,350 words in all. §6.2.3, pp. 108–109, an automated behavioural audit built from about 2,900 investigation sessions. §6.4.1.2, pp. 164–166, “Unverbalized awareness of being evaluated or graded”. §6.4.2, pp. 170–175, grader awareness, including the finding that it rises over the course of training. §6.5.2, pp. 195–201, potential sandbagging on dangerous-capability evaluations. Cite this 5.0 card specifically: the 5.1 card of 1 September 2026 is a different document of 212 pages, and these section numbers and page ranges do not carry across to it.
• Wataoka et al. (2024), "Self-Preference Bias in LLM-as-a-Judge" (arXiv:2410.21819): the perplexity/familiarity mechanism, with GPT-4 as the strongest case.
• Sharma et al. (2023), "Towards Understanding Sycophancy in Language Models" (arXiv:2310.13548): preference data rewards agreement over correctness (recap from 6.4).
• Gao et al. (2022), "Scaling Laws for Reward Model Overoptimization" (arXiv:2210.10760): over-optimisation, now of an AI proxy (recap from 6.4).
• Shumailov et al. (2024), "AI models collapse when trained on recursively generated data" (Nature 631, 755–759; preprint arXiv:2305.17493): model collapse, used here as argument by analogy.
Next
Sub-session 7.4 takes up the normative question the whole session has been deferring: whose constitution? Democratic value-setting, the African-language ceiling, and the warning against tokenistic participation.