ArXiv: 2401.10020
🎯 Pitch
A Llama 2 70B that rewards its own outputs during training beats GPT-4 0613 on AlpacaEval, and its reward judgments get more accurate over time rather than being frozen. By disabling the human-feedback bottleneck through Iterative DPO, the model improves both its instruction following and its ability to score responses, creating a runway for continued self-improvement.
1. Executive Summary
This paper introduces Self-Rewarding Language Models, a framework where a single language model serves simultaneously as both the instruction-following policy and its own reward model via LLM-as-a-Judge prompting (evaluating candidate responses on a 5-point additive scale covering relevance, coverage, usefulness, clarity, and expertise). Starting from a Llama 2 70B seed model fine-tuned on a small set of Open Assistant data (~3,200 IFT and ~1,630 EFT examples), the approach iteratively generates new prompts, produces candidate responses, scores them using its own reward judgments, and constructs preference pairs for Iterative DPO training across three iterations. The resulting Iteration 3 model achieves a 20.44% win rate over GPT-4 Turbo on AlpacaEval 2.0—outperforming Claude 2, Gemini Pro, and GPT-4 0613—while simultaneously improving its own reward modeling ability (pairwise accuracy with human rankings rises from 78.7% at Iteration 1 to 81.7% at Iteration 3), establishing that both instruction following and evaluation capability can improve through self-generated training signals without requiring external human annotations or distilled targets from stronger models.
2. Context and Motivation
The Core Problem: Human Feedback Is a Bottleneck for LLM Alignment
The fundamental obstacle this paper addresses is structural rather than algorithmic. Current approaches to aligning large language models with human preferences rely on external, static sources of training signal—either human annotations collected once and frozen (as in RLHF; Ouyang et al., 2022; Bai et al., 2022a) or reward models distilled from those annotations (which are then themselves frozen). The paper argues that this creates an intrinsic ceiling: the quality of the resulting instruction-following model cannot exceed the quality of the reward signal used to train it, and that reward signal cannot improve during training because it is produced by a fixed process.
To cast this in concrete terms: in standard RLHF, human annotators compare two model responses and indicate which is better. These pairwise preferences train a reward model, which is then deployed as a frozen scoring function during PPO training of the language model. The reward model's judgments are a compressed, lossy representation of human preferences at the moment of annotation. As the language model improves during training—generating responses that may differ qualitatively from those the reward model was trained on—the reward model provides no corresponding improvement in its evaluations. It is, as the paper puts it, "bottlenecked by human performance level" (Section 1).
This bottleneck has two dimensions:
-
Quantity: Human preference data is expensive and slow to collect. The standard recipe (Ouyang et al., 2022; Touvron et al., 2023) requires large teams of annotators producing tens or hundreds of thousands of labeled examples. For open-source or resource-constrained efforts, this scale of annotation may be infeasible—the paper's own experiments use only 3,200 seed instruction-following examples from Open Assistant (Köpf et al., 2023), a tiny fraction of what proprietary systems employ.
-
Quality ceiling: Regardless of annotation volume, a reward model trained on human data cannot develop evaluation capabilities surpassing the collective judgment of its annotators. If the goal is to build models that eventually exceed human performance on complex tasks, a reward model that is itself bounded by human judgment cannot provide adequate training signal for such superhuman capabilities. The paper's framing is explicit: "to achieve superhuman agents, future models require superhuman feedback in order to provide an adequate training signal" (Section 1). A frozen reward model trained on human preferences simply cannot deliver this.
Direct Preference Optimization (DPO; Rafailov et al., 2023) removes the separate reward model entirely, training the language model directly on human preference pairs. This simplifies the pipeline but does not address the core bottleneck: the preference data itself is still human-annotated and fixed in quantity and quality. The ceiling remains.
Why This Problem Matters: The Alignment Scaling Wall
The significance of this bottleneck extends beyond academic interest. There are several converging pressures that make self-improving reward signals critically important:
The scaling of alignment data is not keeping pace with model capability. Pretraining data has grown to trillions of tokens, and model sizes have grown to hundreds of billions of parameters. Alignment data, by contrast, is typically hand-labeled and orders of magnitude smaller. The Llama 2 paper (Touvron et al., 2023), for instance, reports over 1 million human annotations for its reward models—an impressive figure in absolute terms but minuscule compared to the 2 trillion tokens used for pretraining. If instruction following is to improve at the rate pretraining has, the alignment data pipeline must become more scalable. Self-generated training signals are a natural candidate.
Human evaluation becomes less reliable as model outputs improve. As language models approach or exceed human-level performance on writing, reasoning, and creative tasks, human annotators face increasing difficulty in reliably discriminating between high-quality outputs. Two near-perfect responses may differ in subtle ways that lay annotators struggle to adjudicate. A model that learns to evaluate its own outputs—and improves this evaluation capability over time—could, in principle, develop more fine-grained discrimination than static human labels provide.
Deployment domains require domain-specific alignment. General-purpose instruction following is valuable, but many real-world applications (medical advice, legal reasoning, scientific research) require alignment signals that incorporate specialized expertise. Human annotation in these domains is particularly expensive and scarce. A framework where a base model can bootstrap its own reward signal from a small seed of domain-specific examples would dramatically lower the barrier to domain adaptation.
The path to superhuman systems. If one believes that language models will eventually surpass human performance on complex cognitive tasks, then the reward models used to train them must also surpass human judgment. The only plausible source for such superhuman feedback is the models themselves—either the same model self-evaluating or a more capable model providing evaluations. This paper investigates the former case, where a single model provides its own rewards, and shows that iterative self-training can bootstrap both task performance and evaluation capability from a modest seed dataset. Even if the improvements eventually saturate (as the authors acknowledge they likely will, Section 5), the framework opens a research direction toward systems whose training signal is not perpetually limited by a fixed corpus of human judgments.
Prior Approaches and Where They Fall Short
The paper situates itself against several existing lines of work, each of which addresses part of the self-improvement puzzle but leaves the fundamental bottleneck unsolved.
Reinforcement Learning from Human Feedback (RLHF; Ouyang et al., 2022; Bai et al., 2022a). This is the dominant paradigm. Human annotators rank model outputs, a reward model is trained on these rankings, and the language model is optimized via PPO against the frozen reward model. The limitation is clear: the reward model is fixed. It cannot improve as the language model's outputs evolve, and it cannot exceed the quality of its human training data. The paper also notes a practical concern: training a separate reward model and running PPO is computationally complex and, in some configurations, the reward model must be called repeatedly during RL training, making inference expensive (Section 4, referencing Lee et al., 2023).
Direct Preference Optimization (DPO; Rafailov et al., 2023) and variants. DPO eliminates the intermediate reward model by reformulating the RL objective so that the language model itself implicitly represents a reward function. This is simpler and more stable, but the training data is still human preference pairs—fixed in quantity and quality. The paper builds on DPO as its optimization backbone (using Iterative DPO from Xu et al., 2023) but replaces the static human preference data with self-generated, self-scored preference pairs.
Reinforcement Learning from AI Feedback (RLAIF; Bai et al., 2022b; Lee et al., 2023). In RLAIF, an external LLM is used as a judge to evaluate model outputs, and these AI-generated evaluations are used to train a reward model (which may then be used for RL) or directly as reward signals. This replaces human annotators with a language model, addressing the quantity bottleneck. But the paper identifies a critical limitation: the judge model is fixed and separate from the model being trained. In Lee et al. (2023), for instance, an "off-the-shelf" LLM evaluates responses and the resulting data trains a separate reward model—the judge never improves, and the ceiling is set by the judge's (static) capability. The paper's key conceptual move is to fold the judge and the policy into the same model, so that as the policy improves at instruction following, its judgment capability improves as well, creating richer training data for the next iteration. This is a virtuous circle that RLAIF does not provide.
Self-Instruct and data augmentation approaches (Wang et al., 2023; Taori et al., 2023; Chen et al., 2024a; Li et al., 2024). Several methods improve LLMs by (self-)generating additional training data. Self-Instruct (Wang et al., 2023) generates prompts and responses, but does not include a quality assessment mechanism—all generated examples are used, or simple heuristics filter them. Alpagasus (Chen et al., 2024a) uses ChatGPT as an external judge to curate the Alpaca dataset, filtering to higher-quality examples. Instruction Backtranslation (Li et al., 2024) generates prompts from web documents and uses the LLM itself to score and filter the resulting instruction-response pairs—the paper characterizes this as "an instance of a self-rewarding model, but in a specialized setting" (Section 4). The limitation shared by these approaches is that the curation/judging mechanism is either non-existent (raw generation), external and frozen (ChatGPT), or specialized rather than general. None of them demonstrate that the evaluation capability itself improves through self-training iterations.
SPIN (Chen et al., 2024b). SPIN is perhaps the closest recent work to this paper's approach. It uses an Iterative DPO-like framework where, in each iteration, the current model's generations serve as "losing" responses and human-annotated responses serve as "winning" responses. This avoids external reward models, but the paper identifies a clear limitation: "once the model generations reach human performance, they are bottlenecked" (Section 4). The winning response in each pair must be human-authored, so the approach cannot surpass the quality of available human demonstrations. Additionally, each prompt requires a human response, limiting scalability to new, unlabeled prompts. The Self-Rewarding framework removes this requirement: both winning and losing responses are model-generated and model-evaluated, with no dependence on human labels per prompt.
Pairwise Cringe Optimization / Iterative DPO (Xu et al., 2023). The paper's Iterative DPO training protocol is directly adopted from Xu et al. (2023), who showed that training on preference pairs iteratively—with each iteration's model generating data for the next—improves over standard single-round DPO. However, Xu et al. (2023) used an external, fixed reward model to score the generated responses and construct preference pairs. The Self-Rewarding framework replaces this external reward model with the training model itself, creating a self-contained loop where the same model generates, evaluates, and learns from its own outputs. The paper explicitly positions itself as extending Iterative DPO by removing the external reward model dependency.
How This Paper Positions Itself
The paper's positioning can be understood along three dimensions: unification, self-improvement, and practical minimalism.
Unification: one model, both skills. The paper argues that instruction following and response evaluation should not be handled by separate models or separate training pipelines—they should be learned jointly within a single model, because they are mutually reinforcing. This is motivated by an analogy to multitask learning in pretraining (Collobert and Weston, 2008; Radford et al., 2019): just as training on many tasks at once enables task transfer during pretraining, incorporating reward modeling into the same system as instruction following "allows task transfer between the reward modeling task and the instruction following tasks" (Section 1). The LLM-as-a-Judge mechanism (Zheng et al., 2023b) makes this unification natural: evaluating a response is itself an instruction-following task—"given this prompt and this response, assign a score"—so a model trained to follow instructions should, in principle, be able to learn evaluation as a special case. The paper's EFT (Evaluation Fine-Tuning) seed data provides initial examples of this task, and the iterative loop reinforces it.
Self-improvement: the virtuous circle. The paper's central claim is that iterative self-training creates a positive feedback loop. At iteration , model generates responses and also evaluates them. These evaluations construct preference pairs used to train via DPO. If 's evaluation capability is at least somewhat correlated with true quality, then should improve at instruction following. And, critically, because is a better instruction-following model, it should also be a better evaluator—the LLM-as-a-Judge task benefits from general instruction-following capability. Thus provides higher-quality preference data for the next iteration. This is the "self-rewarding" loop: the reward model and the policy are the same entity, improving in lockstep.
The paper is careful not to overclaim: it notes that "this improvement likely saturates in real-world settings" (Section 5) and that only three iterations were run. But even if saturation occurs, the practical implication is significant: a model can be trained to surpass the quality of its initial seed data, without requiring additional human annotations or distillation from stronger models. This contrasts with the standard RLHF picture where the final model quality is fundamentally bounded by the training signal quality.
Practical minimalism: small seed, no distillation, no external models. A striking aspect of the paper's experimental design is how little it requires. The seed data is 3,200 IFT examples and 1,630 EFT examples from Open Assistant—a freely available, human-annotated dataset. There is no distillation from GPT-4 or other proprietary models (unlike Alpaca, Vicuna, and many other open-source instruction-tuned models). The model evaluates its own outputs; there is no separate judge, no external reward model, and no human verification of the self-generated preference pairs. The prompt generation step (for creating new training prompts) does use an external model (Llama 2-Chat 70B with 8-shot prompting), but the paper shows in Appendix A.5 that the training model itself can generate prompts—the external model was used for efficiency, not necessity. This minimalism is both a practical advantage (the method can be adopted with modest resources) and a conceptual strength (it isolates the self-rewarding mechanism as the source of improvement, rather than relying on stronger external supervision).
The paper deliberately contrasts its approach with the leaderboard entries in Table 1, noting that "many of those competing models contain either proprietary alignment data (which is typically large, e.g., over 1M annotations in Touvron et al., 2023) or use targets that are distilled from stronger models. In contrast, our Self-Rewarding model starts from a small set of seed data from Open Assistant, and then generates targets and rewards from the model itself for further iterations of training" (Section 3.2.1). The Iteration 3 model's 20.44% AlpacaEval 2.0 win rate—beating Claude 2, Gemini Pro, and GPT-4 0613—is presented not as an absolute performance claim but as evidence that self-rewarding can produce competitive models without the data advantages that larger proprietary systems enjoy.
The Gap This Paper Fills
Synthesizing the above: prior work on LLM alignment had explored external AI feedback (RLAIF), iterative training (Iterative DPO), self-generated training data (Self-Instruct), and unified instruction-evaluation models (Instruction Backtranslation). But no prior work had demonstrated a system where all of these elements are combined into a single loop—where the training model provides its own reward signal, that reward signal improves through training, and the resulting preference data drives further instruction-following improvements, all starting from a modest seed dataset. The paper's contribution is this closed-loop self-rewarding architecture and the empirical demonstration that both sides of the loop (instruction following and reward modeling) improve through its operation.
3. Technical Approach
3.1 Reader Orientation
This is primarily a systems and training methodology paper whose core idea is that a single language model can simultaneously serve as both the policy (generating responses to instructions) and the reward model (evaluating the quality of those responses), and that training these two capabilities jointly in an iterative loop causes both to improve—the model becomes better at following instructions because it trains on higher-quality self-generated preference data, and it becomes better at evaluating responses because improved instruction-following ability transfers to the LLM-as-a-Judge evaluation task. The paper does not introduce a new architecture, optimization algorithm, or loss function; rather, it proposes a specific training protocol—a sequence of data generation and fine-tuning steps—that creates a self-reinforcing cycle where the model's outputs at iteration become the training data for iteration , and the model's own judgments (not an external reward model or human labels) determine which outputs are preferred.
3.2 Big-Picture Architecture (Diagram in Words)
The system has four major components that are orchestrated in a loop across three iterations (with the possibility of more):
-
Seed Training Data — two static datasets of human-authored examples: Instruction Fine-Tuning (IFT) data (~3,200 prompt-response pairs from Open Assistant) and Evaluation Fine-Tuning (EFT) data (~1,630 examples teaching the model how to act as an LLM-as-a-Judge, with chain-of-thought justifications and scores on a 5-point additive scale). These are used only for the initial supervised fine-tuning step (producing model ) and are never augmented with additional human labels.
-
Self-Instruction Creation Pipeline — a data generation procedure that takes a trained model and produces new preference pairs without human involvement. It has three sub-steps: (a) generate new prompts using few-shot prompting (from an external prompt generator or the model itself), (b) sample diverse candidate responses from for each prompt, and (c) have itself score each response via LLM-as-a-Judge prompting (sampled 3 times with temperature 0.7 and averaged to reduce variance). Preference pairs are formed from the highest and lowest-scoring responses per prompt (discarding ties).
-
Instruction Following Training — the optimization step that consumes preference pairs and produces the next model. The paper uses Direct Preference Optimization (DPO) with specific hyperparameters (, learning rate decaying to , batch size 16, dropout 0.1). Training is performed iteratively: is trained via DPO on AIFT() data, is trained via DPO on AIFT() data, and so on.
-
The Model Itself — a single Llama 2 70B model that, at each iteration, embodies both skills (instruction following and reward modeling) simultaneously. There is no architectural separation between the policy head and the reward head; the distinction is purely functional—the same weights are used for both tasks, with the task determined by the input prompt format.
Information flows as follows: seed IFT+EFT data → SFT training → → Self-Instruction creation (generate prompts, generate responses, evaluate responses) → AIFT() preference pairs → DPO training → → Self-Instruction creation using → AIFT() preference pairs → DPO training → . At each iteration, the preference data is generated by the model from the previous iteration, and the model improves at both generating responses and evaluating them.
3.3 Roadmap for the Deep Dive
- First, the seed training data construction (IFT and EFT), since these determine the initial capabilities of and establish the LLM-as-a-Judge prompt format that is used throughout all subsequent iterations.
- Second, the Self-Instruction creation pipeline, which is the data engine that generates new training examples—this includes prompt generation, candidate response sampling, and the self-reward evaluation mechanism that replaces an external reward model.
- Third, the preference pair construction logic, because the transformation from raw scored responses to DPO training pairs involves specific design choices (highest vs. lowest scoring, tie discarding, score averaging) that affect what signal the model receives.
- Fourth, the iterative DPO training protocol, including the model sequence definition (), the hyperparameters, and the early stopping procedure based on Claude 2 evaluation.
- Fifth, the LLM-as-a-Judge prompt format and the additive 5-point scoring rubric, which is the core mechanism by which the model produces reward signals—the specific wording of this prompt strongly affects evaluation quality, and the paper's choice of an additive criteria-based prompt over a multiple-choice bucket prompt is a key design decision.
- Sixth, the relationship between the two training objectives (IFT and EFT), including the empirical finding that joint training does not degrade either capability, which is a necessary condition for the self-rewarding loop to function.
3.4 Detailed, Sentence-Based Technical Breakdown
This paper proposes a training protocol—not a new model architecture or loss function—for aligning language models using self-generated preference data. The core insight is that a single language model can be trained to perform two tasks simultaneously (instruction following and response evaluation), and that iterative self-training on the model's own evaluations creates a feedback loop where both capabilities improve. The following subsections trace the full pipeline from raw pretrained model to the final Iteration 3 self-rewarding model.
Seed Training Data: IFT and EFT Construction
The entire self-rewarding framework starts from two small, static datasets derived from Open Assistant (Köpf et al., 2023). These datasets are constructed once and never augmented with additional human labels throughout the iterative training process—all subsequent training data is model-generated and model-evaluated.
Instruction Fine-Tuning (IFT) Data. The IFT dataset consists of 3,200 human-authored (instruction prompt, response) pairs sampled from Open Assistant. The sampling criteria are: only first conversational turns, only English language, and only examples with the highest human-annotated rank (rank 0). This filtering follows the procedure of Li et al. (2024) and produces a set of high-quality single-turn instruction-following examples.
The IFT data serves two purposes. First, it is used for supervised fine-tuning (SFT) of the base Llama 2 70B model, producing what the paper calls the "SFT Baseline"—a model trained only on IFT data with no evaluation fine-tuning and no iterative self-training. Second, it is combined with EFT data to produce , the starting point for the self-rewarding loop.
The SFT training hyperparameters for the IFT-only baseline are: learning rate decaying (cosine schedule) to at the end of training, batch size 16, dropout 0.1, and loss computed only on target tokens (not the full input+target sequence). The paper notes that this model already achieves non-trivial instruction-following performance, serving as a meaningful comparison point for subsequent iterations.
Evaluation Fine-Tuning (EFT) Data. The EFT dataset teaches the model to act as an LLM-as-a-Judge—that is, to evaluate the quality of a response given an instruction prompt. The data is constructed from Open Assistant's multiple ranked human responses per prompt. The construction procedure is:
-
For prompts in the Open Assistant training set that have multiple human-ranked responses, format each (instruction, response) pair into the LLM-as-a-Judge prompt template shown in Figure 2. This template includes: the scoring criteria description (the additive 5-point system covering relevance, coverage, usefulness, clarity, and expertise), the instruction text, and the response text to be evaluated.
-
Since the Open Assistant data provides human rankings but not chain-of-thought justifications or numerical scores, generate target outputs using the SFT Baseline model (trained only on IFT data). The SFT Baseline is prompted with the evaluation input and produces a justification followed by a score.
-
Accept a generated evaluation into the EFT training set if and only if the ranking of the produced scores agrees with the human rankings in the original Open Assistant data. That is, if humans ranked response A higher than response B, and the model assigns a higher score to A than to B, that evaluation is accepted. If the model's score ordering disagrees with human rankings, the evaluation is discarded.
-
Rebalance the score distribution by discarding some examples that receive the most common score (the paper notes many samples receive a score of 4). This prevents the training set from being dominated by a single score value, which would make the model's score predictions poorly calibrated across the full 1-5 range.
The resulting EFT dataset contains 1,630 training examples and 541 evaluation (held-out) examples. These do not overlap with the IFT data—they use different prompts from Open Assistant. The evaluation set is used to measure reward modeling ability (pairwise accuracy, exact match, Spearman correlation, Kendall's , and the percentage of perfect-5 responses that match human top-ranked responses).
Combined IFT+EFT training for . Model is produced by initializing from the base pretrained Llama 2 70B () and fine-tuning via SFT on the combined IFT+EFT data (3,200 + 1,630 = 4,830 examples total). The training uses the same SFT hyperparameters as the IFT-only baseline. The output is a single model that has been trained on both tasks simultaneously—generating responses to instructions and evaluating the quality of responses—without any architectural separation between the two capabilities. The paper explicitly verifies that adding EFT data does not degrade IFT performance (30.5% wins vs. 30.9% wins in head-to-head evaluation, Section 3.2.1), which is a critical prerequisite for the self-rewarding loop: if teaching the model to evaluate hurt its ability to generate, the virtuous circle would break at the first iteration.
Why this construction rather than alternatives. The paper does not use the PRM800k-style human step-level labels or external LLM distillation for the EFT data. The SFT Baseline is used as the generator of evaluation targets because it is the same model family and training distribution, avoiding the distribution shift that the paper on Self-Rewarding models cites as a problem in prior work (comparable to the issue in the analyzed paper where PRM800k data was "largely ineffective" for PaLM 2 models). The filtering step—accepting evaluations only when the model's ranking agrees with human rankings—is a form of weak supervision that ensures the training targets are consistent with human preferences without requiring humans to write justifications or assign numerical scores. The rebalancing of scores addresses a practical calibration issue: if the model sees mostly score-4 examples during training, it will tend to output score 4 for most inputs at inference, providing little discriminative signal for constructing preference pairs.
The LLM-as-a-Judge Prompt and Additive 5-Point Scoring Rubric
The mechanism by which the model produces reward signals is LLM-as-a-Judge prompting (Zheng et al., 2023b), where evaluation is formulated as an instruction-following task. The specific prompt format—shown in full in Figure 2—is a critical design choice because it determines how the model interprets the evaluation task and what kind of scores it produces.
The prompt structure. The prompt begins with a description of an "additive 5-point scoring system" where points are accumulated based on the satisfaction of each criterion:
- +1 point: the response is "relevant and provides some information related to the user's inquiry, even if it is incomplete or contains some irrelevant content."
- +1 point (cumulative): the response "addresses a substantial portion of the user's question, but does not completely resolve the query or provide a direct answer."
- +1 point (cumulative): the response "answers the basic elements of the user's question in a useful way, regardless of whether it seems to have been written by an AI Assistant or if it has elements typically found in blogs or search results."
- +1 point (cumulative): the response "is clearly written from an AI Assistant's perspective, addressing the user's question directly and comprehensively, and is well-organized and helpful, even if there is slight room for improvement in clarity, conciseness or focus."
- +1 point (cumulative): the response "is impeccably tailored to the user's question by an AI Assistant, without extraneous information, reflecting expert knowledge, and demonstrating a high-quality, engaging, and insightful answer."
After the criteria description, the prompt includes the specific instruction and response to evaluate, formatted with <INSTRUCTION_HERE> and <RESPONSE_HERE> placeholders. The model is instructed to: "Briefly justify your total score, up to 100 words" and "Conclude with the score using the format: 'Score: <total points>'." The prompt also notes: "Remember to assess from the AI Assistant perspective, utilizing web search knowledge as necessary. To evaluate the response in alignment with this additive scoring model, we'll systematically attribute points based on the outlined criteria."
How the additive rubric works. Each criterion must be satisfied for the corresponding point to be added. A response that satisfies only the first criterion receives 1 point; a response that satisfies the first, second, and third criteria receives 3 points; a perfect response receives 5 points. This additive structure means that the criteria are not mutually exclusive categories—they are cumulative quality thresholds. A response that satisfies criterion 3 is assumed to also satisfy criteria 1 and 2 by construction.
This design has a specific computational property: it decomposes the evaluation task into a sequence of binary judgments ("does the response meet this threshold?"), which is easier for a language model to perform reliably than a single holistic quality judgment on a 1-5 scale. The chain-of-thought justification provides intermediate reasoning that the model can use to calibrate its final score.
Comparison with alternative prompts. The paper reports (Appendix A.2, Table 5) that they also tested the LLM-as-a-Judge prompt from Li et al. (2024), which describes a 5-point scale as multiple-choice quality buckets (e.g., "1: It means the answer is incomplete, vague, off-topic... 2: It means the answer addresses most of the asks..."). Using the SFT Baseline model (IFT-only training), the Li et al. prompt achieved only 26.6% pairwise accuracy against human rankings, compared to 65.1% for the additive prompt. The Spearman correlation was actually negative (-0.18) for the Li et al. prompt, meaning the model's score ordering was slightly anti-correlated with human preferences. The paper's interpretation is that the additive prompt decomposes the task into sub-problems (evaluating specific aspects of quality) that are easier for the model to solve than the multiple-choice formulation, which requires the model to compare the response against five holistic quality descriptions simultaneously.
Why this prompt format matters for the self-rewarding loop. The quality of the self-generated preference data depends entirely on the model's ability to produce accurate and discriminative scores. If the prompt format leads to scores that are poorly calibrated (e.g., always outputting the same score) or anti-correlated with true quality, the DPO training will receive noisy or actively harmful preference pairs. The additive prompt's strong performance (78.7% pairwise accuracy after EFT training, improving to 81.7% by Iteration 3) provides a sufficiently reliable reward signal for the iterative loop to produce improvements rather than degradation. This is an instance of a more general principle: the success of any self-training or AI-feedback approach is gated by the quality of the evaluation mechanism, and prompt engineering is a practical lever for improving that quality.
The scoring procedure at inference. When the model evaluates candidate responses during Self-Instruction creation, there is variance in the scores due to sampling (the model uses temperature , top-p ). To reduce this variance, the paper generates each evaluation 3 times and takes the average score. This triples the evaluation cost per response but provides a more stable signal for constructing preference pairs—reducing the probability that a response is labeled as winning or losing due to sampling noise rather than genuine quality differences.
Self-Instruction Creation Pipeline
The Self-Instruction creation pipeline is the data engine that generates new training examples for each iteration. It replaces the human annotation step in standard RLHF/DPO pipelines with model-driven generation and evaluation. The pipeline has three sequential stages, each of which uses the current model (for ) as the active component.
Step 1: Generate a new prompt. A new instruction prompt is generated using few-shot prompting with 8 demonstrations. For the main experiments, this step uses a fixed external model—Llama 2-Chat 70B—rather than the Self-Rewarding model being trained, following the approach of Self-Instruct (Wang et al., 2023) and Unnatural Instructions (Honovich et al., 2023). The 8-shot demonstrations are sampled as follows: 6 from the original seed IFT data and 2 from model-generated data from previous iterations. The prompt template is the Self-Instruct template for non-classification tasks. Decoding uses temperature and top-p .
Generated prompts are filtered using the same techniques as Self-Instruct: ROUGE-L similarity check (to avoid near-duplicates of existing prompts), keyword filtering (to remove prompts containing undesirable content), and length filtering (to ensure prompts are neither too short nor too long). These filters are heuristic and do not involve any quality assessment by the model itself.
Why use an external model for prompt generation? The paper states this is done "for time efficiency" (Appendix A.5). In a fully self-contained system, the training model itself would generate prompts, and the paper demonstrates in Appendix A.5 that , , and all retain the ability to generate new prompts via in-context learning (manually inspected for all 30 test cases). However, and exhibit a formatting issue: they tend to first generate several instructions, then insert a separator, and then begin responding to those instructions—requiring postprocessing to extract just the prompts. This suggests that as the model becomes more fine-tuned on instruction-following tasks, its behavior under few-shot prompting shifts toward completing the pattern of both asking and answering, which is consistent with its training distribution. This is a practical limitation rather than a fundamental one: with appropriate output parsing, the self-generated prompts would be usable.
The prompt generation step is not claimed as a contribution—it is adopted from prior work (Wang et al., 2023; Honovich et al., 2023)—but it is a necessary component of the self-reinforcing loop because the model needs new, diverse prompts to generate candidate responses for. Without new prompts, the model would be training on preferences over the same small set of seed instructions, which would limit the diversity of the training signal and likely lead to overfitting.
Step 2: Generate candidate responses. For each generated prompt , the model produces diverse candidate responses using sampling with temperature and top-p . The choice of is a practical tradeoff: larger would provide more candidates to select preference pairs from, potentially yielding stronger preference signals (larger quality gaps between best and worst), but at higher computational cost. Four candidates produce six possible pairwise comparisons, from which only the single highest-vs-lowest pair is used (others are discarded). This is a conservative choice: using all pairs would provide more training data but risk including pairs where the quality difference is small and the model's score ordering is unreliable.
The temperature of 0.7 is high enough to produce diverse responses (the model can explore different phrasings and approaches) but not so high that generation quality degrades substantially. The top-p value of 0.9 truncates the tail of the distribution, preventing the model from sampling very low-probability tokens that might produce incoherent text.
Step 3: Evaluate candidate responses (self-reward). For each prompt and each candidate response , the model evaluates the response using the LLM-as-a-Judge prompt format (Figure 2). The model produces a chain-of-thought justification followed by a score . Because the model uses sampled decoding (temperature , top-p ) for evaluation as well, there is variance in the scores—the same response evaluated multiple times may receive different scores. The paper generates each evaluation 3 times and takes the average score to reduce this variance. The computational cost is therefore evaluation calls per prompt (3 evaluations for each of 4 candidate responses).
The average score for each response is computed as the arithmetic mean of the three sampled scores. The paper does not specify whether non-integer average scores are rounded or used directly; given that the preference pair construction uses the highest and lowest average-scoring responses, the exact values affect only the ordering (for selecting winning and losing responses) and the tie-breaking decision (pairs are discarded if the scores are equal).
Why average over 3 evaluations? This is a variance-reduction technique. With temperature 0.7, the model's score for a given response can vary—a borderline response might receive a 3 in one sample and a 4 in another. Averaging dampens this noise, making the relative ordering of the four candidate responses more reliable. The choice of 3 evaluations is likely a practical balance: 1 evaluation would be noisy, 5+ would be more accurate but more expensive, and 3 provides a reasonable signal-to-cost ratio. The paper does not provide an ablation on the number of evaluation samples.
The data volumes produced. In the first self-rewarding iteration (using for Self-Instruction creation), the pipeline produces 3,964 preference pairs forming the AIFT() dataset. In the second iteration (using ), it produces 6,942 preference pairs forming the AIFT() dataset. The increase from 3,964 to 6,942 is not explained in detail, but likely reflects either more prompts being generated, fewer pairs being discarded due to score ties, or both. These dataset sizes are modest compared to the million-scale human annotation sets used in proprietary systems (e.g., Llama 2's >1M annotations), which is consistent with the paper's emphasis on data efficiency.
Preference Pair Construction Logic
Given a prompt and four candidate responses with their average scores, the preference pair construction procedure is:
- Identify the response with the highest average score as the winning response .
- Identify the response with the lowest average score as the losing response .
- If the highest and lowest average scores are equal (i.e., all four responses received the same average score), discard the prompt entirely—no preference pair is constructed.
- Otherwise, form the training example for DPO training.
Why only the extreme pair? The paper uses only the single highest-vs-lowest pair from each prompt, discarding the other four pairwise comparisons. This is a deliberate design choice that prioritizes signal quality over data quantity. The highest-vs-lowest pair represents the largest quality gap among the four candidates, making it the pair for which the model's relative ordering is most likely to be correct. Including pairs with smaller score gaps (e.g., second-highest vs. third-highest) would increase the training data volume but introduce pairs where the model's score difference is less reliable—these pairs might be noisy or even incorrect (reversing the true quality ordering), which could degrade DPO training.
This choice reflects a broader tension in preference learning: more data is generally helpful, but only if the preference labels are accurate. When the labeler (in this case, the model itself) has imperfect judgment, filtering to high-confidence pairs can be more effective than using all available pairs. The paper does not provide an ablation comparing "extreme pair only" against "all pairs," so this design choice is justified by reasoning rather than empirical comparison.
Tie discarding. The discarding of pairs with equal scores serves two purposes. First, it avoids training on pairs where the model has no preference—DPO assumes that is genuinely preferred to , and training on pairs where this is not the case would push the model toward arbitrary preferences. Second, equal scores often indicate that all four candidate responses are of similar quality (either all good or all poor), in which case the preference signal is genuinely absent. The fact that 3,964 pairs were produced from the first iteration (out of some larger number of generated prompts) indicates that a non-trivial fraction of prompts were discarded due to score ties, though the exact fraction is not reported.
What makes a "good" preference pair in this framework? An ideal preference pair has two properties: (1) the score difference between winning and losing responses is large (indicating a clear quality gap), and (2) the model's score ordering is accurate (the higher-scored response is genuinely better). Condition (1) is addressed by using only the extreme pair. Condition (2) depends on the model's reward modeling accuracy—which improves across iterations (pairwise accuracy rises from 78.7% to 81.7%). This means that the preference data quality at iteration is, in expectation, better than at iteration , because the model generating the data has improved as an evaluator.
Iterative DPO Training Protocol
Direct Preference Optimization (DPO). The paper uses DPO (Rafailov et al., 2023) as the preference tuning algorithm rather than PPO-based RL. DPO reformulates the RLHF objective so that the language model itself implicitly represents a reward function, and the training loss operates directly on preference pairs without requiring a separate reward model. The DPO loss for a preference pair is:
where is the policy being optimized (the current model), is a reference policy (the model before DPO training, i.e., when training ), is a temperature parameter controlling how strongly the optimization is constrained to stay near the reference policy, is the logistic sigmoid function, and is the dataset of preference pairs.
What it computes: The DPO loss increases the log-probability ratio for winning responses and decreases it for losing responses, with the sigmoid providing a smooth margin. When the model assigns higher relative probability to than to compared to the reference policy, the argument inside is positive, making close to zero (low loss). When the model assigns higher relative probability to , the argument is negative, making strongly negative (high loss). The parameter scales the log-ratios: larger means the model must be more confident in its preference to achieve low loss, while smaller allows smaller probability differences to satisfy the loss.
Why this form: DPO avoids training a separate reward model and running PPO, which simplifies the training pipeline and eliminates the reward model quality bottleneck. However, in this paper's framework, the "reward model" is not eliminated—it is the model itself via LLM-as-a-Judge prompting. The DPO training is consuming preference pairs that were constructed by the model's own judgments. So DPO eliminates the architectural separation of reward model and policy, but the functional role of the reward model (assigning scores to responses) is still performed by the model during the Self-Instruction creation phase, not during DPO training itself. The paper's contribution is making these two functions reside in the same model and showing they can co-improve.
DPO hyperparameters. The paper uses , which is a relatively small value that allows the model to deviate more from the reference policy compared to larger values like 0.5 or 1.0. This choice is appropriate because the preference pairs are model-generated rather than human-annotated—the quality signal may be somewhat noisier, and a smaller allows the model to fit the preference data more aggressively. The learning rate is decaying (cosine schedule) to , batch size 16, and dropout 0.1. These are standard values for fine-tuning Llama 2 70B models and are not claimed as novel.
Early stopping. The paper performs early stopping by saving a checkpoint every 200 training steps and evaluating generations on 253 validation examples (derived from various sources following Li et al., 2024). The evaluation uses Claude 2 (Anthropic, 2023) as a pairwise judge comparing the current checkpoint's generations against the previous step's generations, using the AlpacaEval evaluation prompt format (Li et al., 2023). The checkpoint that performs best against the previous model's outputs is selected. This validation procedure is notable because it uses an external model (Claude 2) for model selection, introducing a dependency on a more capable model—but only for checkpoint selection, not for training data generation.
The model sequence. The iterative training is defined formally as:
- : Base pretrained Llama 2 70B with no fine-tuning.
- : Initialized with , then fine-tuned on the IFT+EFT seed data using SFT.
- : Initialized with , then trained with AIFT() data using DPO.
- : Initialized with , then trained with AIFT() data using DPO.
AIFT() denotes "AI Feedback Training data created using model "—the preference pairs produced by running the Self-Instruction creation pipeline with model as the response generator and evaluator.
This sequence has an important property: each DPO step uses the previous model as the reference policy . That is, when training from , the reference policy is ; when training from , the reference policy is . This means the DPO optimization at each step is constrained to stay near the model that generated the training data, which helps prevent the model from drifting too far from the data distribution it was evaluated on—a form of implicit regularization against distribution shift.
What "Iterative DPO" means concretely. The term "Iterative DPO" (from Xu et al., 2023) refers to the process of: (1) train a model via DPO on some preference data, (2) use that trained model to generate new responses, (3) score those responses (in Xu et al., with an external reward model; in this paper, with the model itself), (4) construct new preference pairs, and (5) train another round of DPO. The iteration is over the full cycle of data generation + training, not over multiple epochs of DPO on the same data. Each iteration produces a new model that serves as both the policy and the reward model for the next iteration's data generation.
Why three iterations? The paper runs three iterations () and observes improvements at each step, both in instruction following (Figure 3) and reward modeling (Table 4). The authors explicitly note this as a limitation—"only ran three iterations in a single setting" (Section 6)—and call for future work to understand the "scaling laws" of this effect for more iterations. Three iterations is likely a practical constraint: each iteration requires generating thousands of preference pairs (3,964 for iteration 1, 6,942 for iteration 2), each of which requires generating 4 candidate responses and 12 evaluation calls (3 per response), totaling model forward passes for the first iteration alone. With a 70B parameter model, this is computationally expensive, and the cost scales with each additional iteration.
Joint Training of IFT and EFT: Why It Works
A critical prerequisite for the self-rewarding loop is that training the model on both instruction following and evaluation tasks simultaneously does not degrade either capability. If adding EFT data harmed IFT performance, the model would start from a weaker , and subsequent self-training might amplify errors rather than improve performance. If IFT training prevented the model from learning to evaluate, the self-reward signal would be too noisy to drive improvements.
The paper provides empirical evidence (Section 3.2.1) that joint training is neutral for IFT performance: (IFT+EFT) achieves 30.5% wins vs. the SFT Baseline (IFT-only) in a head-to-head evaluation, which is essentially a tie (the SFT Baseline wins 30.9% of comparisons, with 38.7% ties). This means the EFT data's prompt format and evaluation task do not interfere with the model's ability to follow instructions—the two tasks are sufficiently compatible that they can be learned simultaneously from the same model weights.
This compatibility is not guaranteed. The IFT data asks the model to produce helpful responses; the EFT data asks the model to produce critical evaluations. A model that learns to be helpful might suppress critical tendencies, or a model that learns to critique might become less helpful. The paper's t-SNE visualization (Appendix A.1, Figure 6) shows that IFT instructions and EFT instructions occupy different regions of the embedding space, suggesting that the model can learn to distinguish between the two tasks based on the input format (the EFT prompt has a distinctive structure with scoring criteria). The model essentially learns a "mode-switching" behavior: when the input matches the IFT pattern, produce a helpful response; when it matches the EFT pattern, produce an evaluation. This is analogous to multitask learning in pretraining, where a single model learns to perform different tasks by conditioning on different input formats.
Why does reward modeling improve through self-training if no additional EFT data is provided? After , no additional EFT-style examples are added to the training data. The AIFT data consists of (instruction, response) pairs in the IFT format, not (evaluation prompt, evaluation output) pairs in the EFT format. Yet reward modeling ability improves from to to (pairwise accuracy rises from 78.7% to 80.4% to 81.7%). The paper's hypothesis (Section 3.2.2) is that "because the model is becoming better at general instruction following, it nevertheless also improves at the LLM-as-a-Judge task." This is the task transfer argument: the LLM-as-a-Judge task is itself an instruction-following task (the instruction is "evaluate this response"), so improvements in general instruction-following capability transfer to the evaluation task even without additional evaluation-specific training examples.
This hypothesis has a specific mechanistic interpretation. The DPO training on AIFT data improves the model's ability to produce high-quality responses (general instruction following). The evaluation task requires the model to read an instruction and response, reason about quality criteria, and produce a justified score. The quality of this reasoning depends on the model's general language understanding and reasoning capabilities—which are strengthened by the IFT-aligned DPO training. So even though the DPO training data does not look like EFT data, the model's improved general capabilities make it a better evaluator. This is the virtuous circle at the heart of the self-rewarding framework.
A plausible alternative hypothesis that the paper does not rule out. The DPO training on AIFT data might improve reward modeling because the AIFT data contains responses of varying quality, and the DPO loss implicitly trains the model's internal quality assessment (since DPO can be interpreted as learning a reward function). However, the paper's DPO implementation uses the standard DPO loss, which does not explicitly train the model to output evaluation scores. The improvement in explicit LLM-as-a-Judge evaluation would have to come from the model's implicit reward function being better calibrated and this calibration transferring to the verbalized evaluation task—a more indirect mechanism than the task transfer hypothesis.
Summary of Design Choices and Their Justifications
- Single model for both policy and reward, rather than separate models: Enables the virtuous circle where improvements in instruction following transfer to evaluation, and improved evaluation provides better training data. Avoids the bottleneck of a frozen, separate reward model that cannot improve during training.
- Additive 5-point scoring rubric rather than holistic quality buckets: Decomposes evaluation into cumulative binary judgments that are easier for the model to perform reliably, as evidenced by dramatically higher pairwise accuracy (65.1% vs. 26.6% for the SFT Baseline using the alternative prompt).
- EFT data constructed via weak supervision from the SFT Baseline rather than human-written justifications: Eliminates the need for expensive human annotation of evaluation examples while ensuring the training targets are consistent with human preference rankings (via the ranking-agreement filter).
- Three evaluation samples per response with averaging: Reduces score variance from sampled decoding without requiring excessive computation. The cost scales linearly with the number of samples, and 3 is a practical compromise.
- Only the extreme (highest vs. lowest) preference pair used per prompt: Prioritizes label quality over quantity—the largest score gap is most likely to represent a genuine quality difference—and avoids training on pairs where the model's relative ordering is less reliable.
- DPO with rather than PPO or larger : Simplifies the training pipeline (no separate reward model or RL loop) and allows the model to fit the self-generated preference data more aggressively, which is appropriate when the labels are noisier than human annotations.
- External model for prompt generation (main experiments), with evidence that self-generation works (Appendix A.5): Practical efficiency consideration—the external model is a fixed cost that does not require running the 70B Self-Rewarding model for prompt generation. The self-generation capability is demonstrated to exist, making the framework fully self-contained in principle.
- Claude 2 for early stopping checkpoint selection: Uses a strong external evaluator to select the best model checkpoint from DPO training runs. This introduces a dependency on an external model, but only for model selection (not training data generation), and the evaluation prompts are from a held-out validation set not used in training.
- Three iterations only: Practical computational constraint given the cost of generating and evaluating thousands of preference pairs with a 70B model. The paper explicitly positions this as preliminary and calls for investigation of scaling behavior with more iterations (Section 6).
4. Key Insights and Innovations
Innovation 1: The Self-Rewarding Loop as a First-Class Training Paradigm
The paper's most fundamental contribution is conceptual rather than algorithmic: it reframes alignment from a two-party system (a policy model trained against a separate, static reward signal) into a unified, self-contained loop where a single model generates, evaluates, and learns from its own outputs in a virtuous circle. This is not an incremental tweak to RLHF or DPO — it is a different organizing principle for how alignment data is produced and consumed.
What the field did before. The dominant assumption in alignment work has been that the reward or preference signal must originate from an external source — either human annotators (Ouyang et al., 2022; Bai et al., 2022a), a reward model distilled from human annotations (the standard RLHF pipeline), or a separate, frozen AI judge (RLAIF; Bai et al., 2022b; Lee et al., 2023). In all of these paradigms, the entity producing the training signal is distinct from the entity being trained, creating what the paper identifies as a structural ceiling: the quality of the policy cannot exceed the quality of the fixed evaluator. Even in iterative preference optimization schemes (Xu et al., 2023), the reward model remains frozen across iterations, so while the policy improves, the quality of the training signal does not.
What this paper changes. The paper collapses the policy and the reward model into a single entity that co-improves. At iteration , model both generates candidate responses and evaluates them via LLM-as-a-Judge prompting. These self-evaluations construct preference pairs used to train via DPO. Critically, is now a better instruction follower and a better evaluator — the two capabilities improve together because the LLM-as-a-Judge task is itself an instruction-following task, and improved general instruction-following ability transfers to the evaluation task. This means the training signal at iteration is of higher quality than at iteration , creating a feedback loop with no fixed external bottleneck.
Why this is a fundamental shift, not an incremental improvement. Prior work had shown that LLMs can evaluate outputs (LLM-as-a-Judge; Zheng et al., 2023b), that AI feedback can substitute for human feedback (RLAIF; Lee et al., 2023), and that iterative training on preference data can improve performance (Iterative DPO; Xu et al., 2023). The paper's contribution is the integration of all three into a closed self-improving loop, backed by the empirical demonstration that the evaluation capability actually does improve across iterations — not just the generation capability. This is what distinguishes self-rewarding from RLAIF: in RLAIF, the judge model is fixed, so the feedback quality is static. Here, the judge is the model being trained, so feedback quality improves as training progresses.
The paper demonstrates this concretely in Table 4. The reward modeling ability of the model — measured by pairwise accuracy with human rankings on held-out evaluation data — improves from 78.7% at Iteration 1 () to 80.4% at Iteration 2 () to 81.7% at Iteration 3 (). This is achieved without any additional evaluation-specific training data after ; the EFT seed data is used only once. The improvement in evaluation quality is a direct consequence of the model's improved general instruction-following ability from DPO training on self-generated preference pairs. This is the virtuous circle: better generation → better evaluation → better training data → better generation. The paper does not merely propose this loop in principle — it demonstrates that it actually turns in practice, with both sides measurably improving.
Why this matters beyond the specific implementation. The self-rewarding framing opens a research direction that the standard RLHF/RLAIF paradigms foreclose. If alignment signal quality can improve through self-training, then the ceiling on model capability is set not by the quality of initial human annotations but by the model's capacity for self-improvement. This is a prerequisite for any system that might eventually surpass human-level judgment on complex tasks — the training signal must itself be capable of surpassing human-level judgment, and the only plausible source for such a signal is the model itself. The paper does not claim to achieve superhuman evaluation (the pairwise accuracy maxes out at 81.7%, well below ceiling), but it establishes the architectural pattern — the unified model, the iterative loop, the demonstrated co-improvement — that makes such a trajectory conceivable.
Innovation 2: The Additive Scoring Rubric as a Mechanism for Reliable Self-Evaluation
The paper contains a striking empirical finding that reframes how to think about LLM-based evaluation: the format of the evaluation prompt can swing performance from near-random (26.6% pairwise accuracy) to strongly predictive (65.1% pairwise accuracy) for the same underlying model on the same data. The specific innovation is the additive 5-point scoring rubric (Figure 2) that decomposes holistic quality judgment into a sequence of cumulative binary criteria.
What the field did before. LLM-as-a-Judge evaluations typically use either comparative prompts ("which response is better?") or holistic rating prompts where the model assigns a score from a predefined scale by matching the response against one of several quality descriptions (e.g., the prompt from Li et al., 2024, shown in Appendix Figure 7, which describes a 5-point scale as a multiple-choice problem with quality-bucket descriptions for each score level). These formats require the model to perform a single, complex judgment: read the response, compare it against all five quality descriptions simultaneously, and select the best match.
What this paper reveals. The additive scoring rubric (Figure 2) transforms the evaluation from a single complex judgment into a structured sequence of simpler ones. Each point on the 5-point scale corresponds to a specific, cumulative criterion:
- Point 1: Is the response relevant at all?
- Point 2: Does it address a substantial portion of the question?
- Point 3: Does it answer the basic elements usefully?
- Point 4: Is it clearly from an AI Assistant's perspective, well-organized, and helpful?
- Point 5: Is it impeccably tailored, reflecting expert knowledge, without extraneous information?
The criteria are cumulative: a response satisfying criterion 3 is assumed by construction to also satisfy criteria 1 and 2. This means the model can evaluate by working up the ladder — "does it meet the bar for point 1? If yes, does it also meet the bar for point 2?" — rather than performing a single five-way classification. The chain-of-thought justification (required by the prompt, Figure 2: "Briefly justify your total score, up to 100 words") provides intermediate reasoning that the model can use to calibrate its final score.
The empirical comparison is dramatic (Appendix Table 5). Using the SFT Baseline model (IFT-only training, no EFT), the additive prompt achieves 65.1% pairwise accuracy with human rankings, while the Li et al. (2024) holistic-bucket prompt achieves only 26.6% — essentially random for a five-class problem. The Spearman correlation is +0.25 for the additive prompt vs. −0.18 for the holistic prompt, meaning the holistic prompt's score ordering is slightly anti-correlated with human preferences. This is not a marginal improvement from prompt engineering — it is the difference between a usable evaluation signal and one that is actively harmful for training.
Why this is an innovation rather than just a prompt engineering trick. The finding generalizes beyond this specific prompt. It reveals a principle: language models are better at decomposing complex judgments into sequences of simpler criteria than at performing holistic five-way classifications. This is consistent with broader evidence that chain-of-thought reasoning improves performance on complex tasks (Wei et al., 2022), but it applies specifically to the evaluation-as-instruction-following setting that the self-rewarding framework depends on. The paper does not merely find a better prompt — it identifies why one prompt structure works and another fails (Appendix A.2: "the model needed to treat the task as a multiple-choice problem, and it was difficult for the model to break down this multiple-choice problem into sub-problems involving evaluating various aspects of the response"). This diagnostic insight — that decomposition, not just scale or training data, is the key to reliable self-evaluation — is transferable to other domains where LLMs are used as judges.
Significance for the self-rewarding loop. The additive rubric is load-bearing for the entire framework. If the model's self-evaluations were as poor as the 26.6% pairwise accuracy from the holistic prompt, the preference pairs constructed from those evaluations would be dominated by noise. DPO training on such data would likely degrade rather than improve performance (the model would be learning arbitrary, incorrect preferences). The additive prompt's strong baseline performance (65.1% for the SFT Baseline) and subsequent improvement through EFT training (78.7% for ) provide a sufficiently reliable signal for the iterative loop to produce genuine improvements rather than destructive feedback. The paper's entire empirical story — improving instruction following and reward modeling across iterations — depends on this prompt design choice, making it a genuinely enabling innovation rather than a cosmetic detail.
Innovation 3: Joint Training of Instruction Following and Evaluation Without Performance Trade-offs
The paper demonstrates that a single model can be trained on both instruction-following tasks (IFT: generating helpful responses) and evaluation tasks (EFT: acting as an LLM-as-a-Judge) without either capability degrading the other. This finding, while presented modestly in the paper, is a critical enabler that challenges a tacit assumption in alignment research: that reward modeling and policy execution are fundamentally different skills best handled by separate models.
What the field assumed. The standard RLHF architecture (Ouyang et al., 2022; Bai et al., 2022a) separates the reward model from the policy model. This separation is not merely a convenience — it reflects an implicit assumption that these are distinct functions with potentially conflicting training objectives. The reward model must be critical and discriminating; the policy must be helpful and generative. Training a single model to do both might seem to risk the model becoming a worse generator (because it learns to critique) or a worse evaluator (because it learns to be agreeable). Even in RLAIF (Bai et al., 2022b; Lee et al., 2023), where the judge is an LLM, it remains a separate model from the policy being trained.
What the paper shows. The head-to-head comparison between (IFT+EFT) and the SFT Baseline (IFT-only) in Figure 3 shows them to be essentially indistinguishable in instruction-following performance: 30.5% wins for vs. 30.9% wins for the SFT Baseline, with 38.7% ties. This is a tie — adding the EFT data to training does not harm instruction-following ability at all. Meanwhile, the EFT training dramatically improves reward modeling: pairwise accuracy rises from 65.1% (SFT Baseline) to 78.7% () as shown in Table 4.
Why this is non-trivial. The fact that two apparently different tasks — generating helpful responses and critically evaluating responses — can be learned jointly without interference suggests that they share a common underlying capability. The paper's interpretation is that the LLM-as-a-Judge task is simply a specialized instruction-following task (the instruction is "evaluate this response according to these criteria"), and that the model learns to switch between modes based on the input prompt format. The t-SNE visualization in Appendix Figure 6 supports this: IFT and EFT instructions occupy distinct regions of the embedding space, meaning the model can learn to distinguish the two tasks by their input patterns and activate different "behaviors" accordingly.
This finding is reminiscent of how multitask learning in pretraining (Radford et al., 2019) enables a single model to perform translation, summarization, question-answering, and other tasks by conditioning on different input formats. The paper extends this principle to the alignment phase: reward modeling, when formulated as an instruction-following task via LLM-as-a-Judge prompting, becomes just another task in the model's repertoire rather than a conflicting objective.
Why this matters for the self-rewarding loop. Without this property, the entire framework would be infeasible. If adding EFT training to degraded instruction following, the model would start the iterative loop from a weaker position, and subsequent self-training might amplify the degradation. If IFT training prevented the model from learning to evaluate, the self-reward signal would be too noisy to drive improvements. The joint-training compatibility is what enables the model to serve both roles — generator and judge — from a single set of weights, which is the operational core of the self-rewarding architecture. The paper's demonstration of this compatibility is therefore a necessary condition for the framework's viability, and its empirical verification is a genuine contribution.
Innovation 4: Preference Pair Construction from Self-Evaluations as a Viable Alternative to Human or External AI Labeling
The paper operationalizes a specific procedure for converting raw model self-evaluations into training data — generating candidate responses, scoring each 3 times with LLM-as-a-Judge prompting, averaging the scores, and selecting the highest-scoring and lowest-scoring responses as a preference pair — and demonstrates that this procedure, applied iteratively, produces models that outperform systems trained on much larger human-annotated datasets. The innovation is not the individual components (model sampling, LLM-as-a-Judge, DPO) but the demonstration that this specific assembly of components, with no human verification or external AI oversight, produces a training signal of sufficient quality to drive substantial improvements.
What the field did before. Preference data for alignment has historically come from humans comparing model outputs (Ouyang et al., 2022; Bai et al., 2022a; Touvron et al., 2023), from a separate reward model evaluating outputs (Xu et al., 2023), or from an external LLM judge evaluating outputs (Lee et al., 2023; Chen et al., 2024a). In all cases, the entity producing the preference labels is external to the model being trained. This creates a dependency that limits scalability: human annotation is expensive, external AI judges require access to (often proprietary) stronger models, and fixed reward models cannot improve. The SPIN approach (Chen et al., 2024b) partially addresses this by using the model's own generations as losing responses, but still requires human-authored winning responses for each prompt, retaining a dependency on human data for every training example.
What this paper demonstrates. The paper shows that a model trained on only 3,200 seed IFT examples and 1,630 seed EFT examples can, through three iterations of self-evaluation and DPO training, produce a model () that achieves a 20.44% win rate over GPT-4 Turbo on AlpacaEval 2.0 — outperforming Claude 2 (17.19%), Gemini Pro (16.85%), and GPT-4 0613 (15.76%). The key detail is that after the seed data is used to produce , no additional human labels, external AI judgments, or distilled targets from stronger models are used. The 3,964 preference pairs used to train and the 6,942 pairs used to train are entirely self-generated and self-evaluated. The paper explicitly contrasts this with the competitive models in Table 1, noting that "many of those competing models contain either proprietary alignment data (which is typically large, e.g., over 1M annotations in Touvron et al., 2023) or use targets that are distilled from stronger models."
Why this is a conceptual advance, not just a performance result. The finding challenges the implicit assumption that high-quality alignment requires high-quality external supervision at scale. The paper shows that a modest seed of human data (4,830 examples total) can bootstrap a self-improving process that produces models competitive with systems trained on orders of magnitude more human annotation. This is not primarily about the absolute performance numbers (20.44% on AlpacaEval 2.0, while impressive, is not state-of-the-art) — it is about the data scaling relationship. The ratio of seed data to final performance is dramatically more favorable than approaches that require human labels or model distillation proportional to the desired performance improvement.
The specific design choices in the preference pair construction — candidates, 3 evaluation samples with averaging, extreme-pair selection only, tie discarding — are each individually modest, but collectively they form a self-reward pipeline that produces a training signal of sufficient quality to sustain three iterations of improvement without collapse or plateau. The negative result in Appendix A.4 is telling: an alternative approach that adds only "perfect score" (5/5) examples to SFT training, rather than constructing preference pairs for DPO, produced no improvement (29% wins vs. 30% wins). This ablation confirms that the preference pair construction — with its explicit contrast between winning and losing responses — is essential to the observed gains, and that simply filtering for high-quality examples is insufficient.
Innovation 5: The Identification of Unified Model Capability as the Enabling Mechanism for Iterative Self-Improvement
The paper offers a specific mechanistic hypothesis for why self-rewarding works that goes beyond the training protocol: the model's reward modeling ability improves across iterations not because it receives more evaluation-specific training, but because improved general instruction-following capability transfers to the LLM-as-a-Judge evaluation task. This is a conceptual claim about the relationship between generation and evaluation capabilities in language models that, if correct, has broad implications for how alignment systems should be designed.
The observation. Table 4 shows that reward modeling ability improves from Iteration 1 (, 78.7% pairwise accuracy) to Iteration 2 (, 80.4%) to Iteration 3 (, 81.7%). Crucially, after , no additional EFT data is added to the training pipeline. The AIFT data used for DPO training consists of (instruction, response) preference pairs in the IFT format — not (evaluation prompt, evaluation output) examples in the EFT format. So the model is not being explicitly trained to improve at evaluation; it receives only instruction-following-style preference data. Yet its evaluation capability improves.
The paper's hypothesis. The authors propose that "because the model is becoming better at general instruction following, it nevertheless also improves at the LLM-as-a-Judge task" (Section 3.2.2). The LLM-as-a-Judge task is itself an instruction-following task: the instruction is "evaluate this response according to these criteria," and the desired output is a justified score. Improvements in the model's general ability to follow complex instructions, reason about criteria, and produce well-structured outputs should therefore transfer to the evaluation task. This is the task transfer mechanism familiar from pretraining (Collobert and Weston, 2008; Radford et al., 2019) but applied within the alignment phase: the model's capabilities are not domain-specific but general, and strengthening them on one task (generating high-quality responses to diverse instructions) strengthens them on related tasks (evaluating response quality).
Why this is significant beyond this paper. If this hypothesis is correct, it implies that the separation of reward modeling and policy execution in standard RLHF is not just practically inconvenient — it is theoretically suboptimal. The reward model in RLHF is trained only on human preference judgments; it does not benefit from the policy's improved language understanding and reasoning capabilities because it is a separate model that is frozen. The policy, meanwhile, cannot benefit from improved evaluation capability because the reward model does not improve. The self-rewarding framework unifies these capabilities, creating a single improvement trajectory where gains in one domain transfer to the other.
This has implications for how to design alignment systems. It suggests that training a model to be a better evaluator should not be treated as a separate objective from training it to be a better generator — the two capabilities are mutually reinforcing when housed in the same model. This argues against the standard practice of training a separate reward model and argues for architectures where the evaluation capability is an integral part of the instruction-following model, improved through the same training process.
Caveats and limits. The paper does not provide a direct causal test of this hypothesis — it observes the correlation (instruction following improves, reward modeling improves) and offers a plausible mechanism, but does not rule out alternatives. For instance, the DPO training on AIFT data might implicitly train the model's internal quality assessment (since DPO can be interpreted as learning a reward function), and this implicit reward function might transfer to the explicit verbalized evaluation task. Or the improvement might be driven by the model simply becoming better calibrated (more accurate at predicting its own output quality) through exposure to its own generations during DPO training, without any transfer from instruction-following capability. The paper does not disentangle these mechanisms, so the task-transfer hypothesis should be understood as the paper's interpretive framework rather than a proven causal claim. Nevertheless, the empirical pattern — both capabilities improving together without evaluation-specific training — is robust and important regardless of the precise mechanism.
5. Experimental Analysis
Evaluation Methodology
-
Dataset. The paper evaluates on several datasets. The primary instruction-following evaluation uses a 256-prompt test set (referred to as IFT test data) derived from various sources following Li et al. (2024). AlpacaEval 2.0 provides a standardized leaderboard evaluation over 805 prompts, computing win rate against GPT-4 Turbo based on GPT-4 judgments. MT-Bench (Zheng et al., 2023b) provides 80 multi-turn questions across categories from math and coding to roleplay and writing, graded by GPT-4 on a 1–10 scale. Reward modeling ability is evaluated on 541 held-out examples derived from Open Assistant (non-overlapping with IFT data), where each instruction has on average 2.85 human-ranked responses. Nine NLP benchmarks (ARC-Easy, ARC-Challenge, HellaSwag, SIQA, PIQA, GSM8K, MMLU, OBQA, NQ) provide standardized knowledge and reasoning evaluations.
-
Base model(s). All experiments use Llama 2 70B (Touvron et al., 2023) as the base pretrained model. The paper states this model was chosen as a representative large-scale open-source model with strong but not saturated instruction-following capability—capable of benefiting from alignment fine-tuning while leaving room for the self-rewarding method to demonstrate improvements. The seed model is further fine-tuned on Open Assistant data, and a separate Llama 2-Chat 70B is used as the fixed prompt generator during Self-Instruction creation.
-
Metrics. Instruction following is evaluated through several metrics: (1) head-to-head win rates using GPT-4 as an evaluator over the 256-prompt IFT test set, with prompts evaluated in both orders and disagreements counted as ties; (2) AlpacaEval 2.0 win rate—the fraction of 805 test prompts where GPT-4 prefers the model's output over GPT-4 Turbo's output; (3) MT-Bench scores, averaging GPT-4 assigned grades out of 10 across 80 multi-turn questions; (4) human evaluation win rates on 50 randomly selected instructions, with three annotators per pairwise comparison and majority voting to decide the winner; (5) accuracy on nine standard NLP benchmarks. Reward modeling ability is evaluated through: pairwise accuracy (fraction of response pairs where the model's score ordering agrees with human rankings), exact match percentage (fraction of instructions where the model's total ordering exactly matches human rankings), Spearman correlation, Kendall's τ, and 5-best percentage (how often responses the model scores a perfect 5/5 were rated highest by humans). These metrics are computed on the 541-example held-out EFT evaluation set.
-
Baselines. The paper establishes several baselines: (1) SFT Baseline: Llama 2 70B fine-tuned via supervised fine-tuning on only the 3,200 IFT examples (no EFT data, no iterative training); (2) Iteration 1 (M1): Llama 2 70B fine-tuned on combined IFT+EFT seed data via SFT—this serves as the starting point for the self-rewarding loop; (3) Iteration 2 (M2): M1 further trained via DPO on AIFT(M1) preference pairs; (4) Iteration 3 (M3): M2 further trained via DPO on AIFT(M2) preference pairs. For AlpacaEval 2.0 leaderboard comparison, the paper benchmarks against published results for GPT-4 0314, Mistral Medium, Claude 2, Gemini Pro, GPT-4 0613, GPT 3.5 Turbo 0613, LLaMA2 Chat 70B, Vicuna 33B v1.3, Humpback LLaMa2 70B, Guanaco 65B, Davinci001, and Alpaca 7B (Table 1). For the SFT-only self-rewarding ablation (no EFT data), an alternative model sequence M′1, M′2, M′3 is defined, starting from IFT-only training and proceeding through the same iterative DPO steps.
-
Generation budget / compute accounting. The paper does not use a formal FLOPs or generation budget metric for comparing methods. Instead, training is performed for a fixed number of iterations (three) with data volumes determined by the Self-Instruction creation pipeline at each step: AIFT(M1) contains 3,964 preference pairs, AIFT(M2) contains 6,942 preference pairs. Each preference pair requires sampling N=4 candidate responses and performing 3 evaluation calls per response (12 total evaluation forward passes per prompt). The total compute for each iteration is thus proportional to the number of prompts generated and the cost of generating and evaluating responses with a 70B parameter model. The paper does not provide wall-clock time or total FLOPs for training, and does not compare the compute cost of self-rewarding training to the cost of collecting equivalent human preference data.
-
Cross-validation / statistical protocol. For DPO training, early stopping is performed by saving checkpoints every 200 steps and evaluating generations on 253 held-out validation examples using Claude 2 as a pairwise judge (in the AlpacaEval format). The checkpoint with the best head-to-head performance against the previous model's outputs is selected. For human evaluation, 50 instructions are randomly sampled from the IFT test set, each producing three pairwise comparisons (baseline vs. M1, baseline vs. M2, baseline vs. M3), and three annotators (the authors themselves, noted as "blind evaluation" by the authors) provide judgments with majority vote determining the winner. No cross-validation or statistical significance testing is reported for the main instruction-following or reward modeling metrics—results are presented as point estimates on the fixed test sets. The paper does not report confidence intervals or standard errors for any metrics. For the NLP benchmark evaluations, results are reported as single-point accuracy values per dataset per model, with no indication of variance across runs.
Main Quantitative Results
Instruction Following Performance Improves Across Iterations
The paper's central empirical claim is that each iteration of self-rewarding training produces a model that is better at instruction following than the previous iteration. This is evaluated through multiple independent assessments.
Head-to-head GPT-4 evaluation (Figure 3). The paper reports head-to-head win rates on the 256-prompt IFT test set using GPT-4 as evaluator:
- vs. : wins 55.5% of comparisons, wins 11.7%, with 32.8% ties.
- vs. SFT Baseline: wins 49.2%, SFT Baseline wins 14.5%, with 36.3% ties.
- vs. : wins 47.7%, wins 12.5%, with 39.8% ties.
- vs. SFT Baseline: wins 62.5%, SFT Baseline wins 9.8%, with 27.7% ties.
- vs. : wins 68.8%, wins 8.6%, with 22.7% ties.
- vs. SFT Baseline: wins 30.5%, SFT Baseline wins 30.9%, with 38.7% ties—essentially a tie, demonstrating that adding EFT data to training does not affect instruction-following performance.
The progressive increase in win rates—from a tie at Iteration 1 to 55.5% at Iteration 2 to 47.7% (over the previous iteration) at Iteration 3—provides evidence that each self-rewarding training step yields substantial improvements. The gap between iterations is large: beats more than 4-to-1 (55.5 vs. 11.7), and beats more than 3-to-1 (47.7 vs. 12.5). Notably, beats more than 8-to-1 (68.8 vs. 8.6), and beats the SFT Baseline more than 6-to-1 (62.5 vs. 9.8), indicating that the cumulative effect of three iterations is very large relative to the seed model.
AlpacaEval 2.0 leaderboard (Table 1). The AlpacaEval 2.0 evaluation provides a standardized external benchmark measuring win rate against GPT-4 Turbo on 805 prompts:
- Iteration 1 (): 9.94% win rate.
- Iteration 2 (): 15.38% win rate.
- Iteration 3 (): 20.44% win rate.
Each iteration improves substantially: +5.44 percentage points from to , +5.06 points from to . The cumulative improvement from Iteration 1 to Iteration 3 is more than 2× in win rate (9.94% → 20.44%). The Iteration 3 model's 20.44% win rate places it above several well-known systems on the leaderboard: Claude 2 (17.19%), Gemini Pro (16.85%), GPT-4 0613 (15.76%), GPT 3.5 Turbo 0613 (14.13%), and LLaMA2 Chat 70B (13.87%). It falls slightly below GPT-4 0314 (22.07%) and Mistral Medium (21.86%). The paper notes that the competing models above and near in the leaderboard "contain either proprietary alignment data (which is typically large, e.g., over 1M annotations in Touvron et al., 2023) or use targets that are distilled from stronger models," whereas the self-rewarding model uses only 3,200 seed IFT examples and self-generated data.
Fine-grained AlpacaEval analysis (Figure 4, Figure 11). The paper breaks down AlpacaEval performance by instruction category (20 categories obtained via GPT-4 clustering), instruction complexity (1–10 scale assigned by GPT-4), and expected response length (1 sentence to 3+ paragraphs). Key findings:
-
By instruction category (Figure 4): Self-rewarding models show win rate improvements across most categories, with particularly large gains in Health, Professional, Linguistics, and Entertainment-related instructions. However, categories like Mathematics, Coding, and Logical Reasoning show smaller or negligible improvements, indicating a limitation: the approach mainly helps the model "better utilize their existing knowledge" rather than acquiring new reasoning capabilities. The Mathematics category shows near-zero win rates for all iterations, suggesting the seed data and self-generated training do not cover mathematical reasoning adequately.
-
By instruction complexity (Figure 11, left): Win rates increase across most complexity levels, with particularly notable gains on moderately difficult tasks (complexity 5, 6, 7 out of 10). The improvement is consistent across the complexity spectrum, suggesting the self-rewarding process benefits both simple and moderately complex instructions.
-
By expected response length (Figure 11, right): Win rates improve across all response length categories. The paper observes that model response lengths increase across iterations: averages 1,092 characters, averages 1,552, and averages 2,552. The paper acknowledges this trend and notes the "known correlation between length and estimated quality," identifying it as a limitation requiring deeper analysis (Section 6).
Human evaluation (Figure 5). To validate that GPT-4-based evaluations align with human judgments, the paper conducts a human evaluation on 50 randomly selected instructions from the IFT test set:
- vs. SFT Baseline: wins 28.0%, SFT Baseline wins 46.0%, with 26.0% ties.
- vs. SFT Baseline: wins 56.0%, SFT Baseline wins 20.0%, with 24.0% ties.
- vs. SFT Baseline: wins 66.0%, SFT Baseline wins 18.0%, with 16.0% ties.
The human evaluation results are broadly consistent with GPT-4 evaluations: later iterations show progressively larger advantages over the SFT Baseline. The vs. SFT Baseline result shows the baseline having an edge (46.0% vs. 28.0%), which differs slightly from the GPT-4 evaluation where they tied (30.5% vs. 30.9%). This may reflect the smaller sample size (50 vs. 256 prompts) or differences in human vs. GPT-4 preferences, but the overall trend of improvement across iterations is confirmed.
MT-Bench (Table 2). MT-Bench provides multi-turn evaluation across eight categories:
- SFT Baseline: 6.85 overall (out of 10).
- : 6.78 overall.
- : 7.01 overall.
- : 7.25 overall.
The overall score improves from 6.78 at Iteration 1 to 7.25 at Iteration 3 (+0.47). The paper breaks down performance into two aggregated categories. For Math, Code & Reasoning: scores improve modestly from 3.83 () to 4.17 (), a gain of 0.34. For Humanities, STEM, Roleplay, Writing, and Extraction: scores improve more substantially from 8.55 to 9.10, a gain of 0.55. The paper attributes the smaller gains in math and reasoning to the underrepresentation of these task types in the Open Assistant seed data. Fine-grained MT-Bench results in Appendix Table 10 show particular strength in Writing (9.58 for , up from 8.83 for the SFT Baseline) and Roleplay (8.73 for , up from 8.15).
NLP Benchmarks (Table 3, Appendix Table 9). Across nine NLP benchmarks, the self-rewarding models mostly maintain performance relative to the base Llama 2 70B and the SFT Baseline:
- ARC-Challenge: Llama 2 base 57.40, SFT Baseline 55.97, 57.51, 54.51, 53.13.
- HellaSwag: Llama 2 base 85.30, SFT Baseline 85.17, 84.99, 84.27, 83.29.
- GSM8K: Llama 2 base 56.80, SFT Baseline 50.72, 60.27, 59.29, 57.70.
- MMLU: Llama 2 base 68.90, SFT Baseline 69.76, 69.34, 69.31, 69.37.
- NQ: Llama 2 base 25.30, SFT Baseline 34.35, 35.48, 33.07, 31.86.
The general pattern is that performance remains roughly stable across iterations, with some mild degradation on certain benchmarks (e.g., ARC-Easy drops from 80.20 for Llama 2 base to 72.35 for ; NQ drops from 35.48 for to 31.86 for ). The paper frames this as an "alignment tax" comparable to what Ouyang et al. (2022) observed during RLHF fine-tuning, hypothesizing that the Open Assistant-based training data distribution is not well-matched to the skills tested in these benchmarks. The Appendix notes that several benchmarks (ARC-Challenge, HellaSwag, SIQA, PIQA, OBQA) are text completion tasks evaluated via log-probability scoring, which is "quite different from what our algorithm tries to optimize."
Reward Modeling Ability Improves Across Iterations
The paper's second central claim is that the model's ability to act as a reward model—evaluating the quality of responses via LLM-as-a-Judge prompting—improves across iterations, despite receiving no additional evaluation-specific training data after . This is evaluated on the 541-example held-out EFT evaluation set (Table 4).
Pairwise accuracy (the primary metric for reward modeling quality):
- SFT Baseline (IFT-only, no EFT): 65.1%.
- Iteration 1 (, IFT+EFT): 78.7% (improvement of +13.6 points from EFT training).
- Iteration 2 (): 80.4% (improvement of +1.7 points over ).
- Iteration 3 (): 81.7% (improvement of +1.3 points over ).
The largest gain comes from adding EFT data (65.1% → 78.7%). Subsequent iterations yield smaller but consistent improvements (+1.7, then +1.3 percentage points), showing that the evaluation capability continues to improve through self-training even without additional EFT examples.
5-best percentage (how often the model's top-scored response matches the human top-ranked response):
- SFT Baseline: 39.6%.
- : 41.5%.
- : 44.3%.
- : 43.2%.
The trend is generally upward but with a slight dip from to (44.3% → 43.2%), while pairwise accuracy continued to improve. This suggests that the model becomes better at pairwise discrimination (ranking two responses correctly) even as its ability to identify the single best response from a set may not monotonically improve.
Exact match percentage (fraction of instructions where the model's total ranking exactly matches human rankings):
- SFT Baseline: 10.1%.
- : 13.1%.
- : 14.3%.
- : 14.3%.
Improvement occurs from SFT Baseline to through , then plateaus at . The absolute numbers are low (exact match of total orderings is a strict criterion), but the improvement from 10.1% to 14.3% represents a meaningful gain.
Spearman correlation:
- SFT Baseline: 0.253.
- : 0.279.
- : 0.331.
- : 0.349.
Steady improvement across all iterations, from 0.253 to 0.349—a 38% relative increase.
Kendall's τ correlation:
- SFT Baseline: 0.233.
- : 0.253.
- : 0.315.
- : 0.324.
Again consistent improvement, from 0.233 to 0.324—a 39% relative increase.
The significance of these results. The reward modeling improvements across iterations are moderate in absolute magnitude (pairwise accuracy gains of 1.3–1.7 points per iteration after ) but consistent across all five metrics. The key insight is that these improvements occur without any additional evaluation-specific training data—the AIFT preference pairs used to train and are in the IFT format (instruction-response pairs), not the EFT format (evaluation prompt—evaluation output pairs). The paper attributes this to task transfer: the model's improved general instruction-following capability from DPO training transfers to the LLM-as-a-Judge evaluation task, which is itself an instruction-following task. This transfer effect is the mechanism that closes the self-rewarding loop: better generation → better evaluation → better training data → better generation.
Instruction Following vs. Reward Modeling: Both Axes Improve
The paper's framing emphasizes that the model improves on both axes simultaneously. The head-to-head win rates (Figure 3) and AlpacaEval leaderboard results (Table 1) demonstrate the instruction-following improvements; the reward modeling metrics (Table 4) demonstrate the evaluation improvements. The fact that both improve across iterations—and that the reward modeling improvements occur without explicit evaluation training—provides the empirical foundation for the "virtuous circle" metaphor. The paper does not provide a formal causal analysis (e.g., measuring whether the improved reward modeling at iteration is responsible for the instruction-following improvement at iteration ), but the correlated improvements across both axes are consistent with the self-rewarding hypothesis.
Preference Optimization Outperforms Positive-Example Augmentation
The paper reports a key negative result in Appendix A.4 that contextualizes the importance of preference pair construction compared to a simpler self-training baseline. An alternative approach was tested: instead of constructing preference pairs for DPO training, add only the highest-scoring self-generated examples (those that received a perfect score of from the model) to the SFT training set. This is analogous to rejection sampling or the approach used in Reinforced Self-Training (Gulcehre et al., 2023). Adding 11,254 such perfect-score examples and optimizing the mixing weight in SFT training produced no improvement: head-to-head with the SFT Baseline yielded 29% wins vs. 30% wins—"i.e., no improvement." This negative result demonstrates that the preference-based training signal (contrasting winning and losing responses via DPO) is essential to the observed gains, and that simply augmenting SFT data with self-identified high-quality examples is insufficient.
Ablation Studies and Robustness Checks
EFT data availability (Appendix A.3, Figure 8): The paper trains a parallel model sequence (M′1, M′2, M′3) starting from the IFT-only SFT Baseline (no EFT data) to test whether the self-rewarding loop functions without initial evaluation-specific training. The results: M′2 achieves 46.5% wins vs. the SFT Baseline, and M′3 achieves 50.4% wins—both substantially lower than the corresponding EFT-initialized models (M2 at 49.2% but M3 at 62.5%). The gap widens with iterations: M3 beats M′3 with 38.7% wins vs. 16.8%. Additionally, without EFT training, the models struggle to produce valid evaluations—they "were not always able to score the responses according to the format and even when they did, the scores given typically converged to 4." This resulted in far fewer valid training pairs: only 541 pairs for AIFT(M′1) and 429 for AIFT(M′2), compared to 3,964 and 6,942 for the EFT-initialized models. This ablation confirms that the seed EFT data is critical for establishing a sufficiently reliable self-reward signal to sustain the iterative loop.
LLM-as-a-Judge prompt format (Appendix A.2, Table 5): Using the SFT Baseline model (IFT-only), the paper compares the additive 5-point scoring prompt used in all main experiments against the multiple-choice quality-bucket prompt from Li et al. (2024). The additive prompt achieves 65.1% pairwise accuracy, while the Li et al. prompt achieves only 26.6%. For exact match, the additive prompt reaches 10.1% vs. 1.1%. The Spearman correlation is +0.25 for the additive prompt vs. −0.18 for the Li et al. prompt—meaning the latter's score ordering is slightly anti-correlated with human preferences. This ablation demonstrates that the specific prompt format is not merely an engineering detail but a load-bearing component of the self-rewarding framework: a poorly chosen evaluation prompt would produce actively harmful training signals. The paper attributes the additive prompt's superiority to its decomposition of the evaluation task into cumulative binary sub-judgments rather than a single holistic five-way classification.
Preference optimization vs. positive-only augmentation (Appendix A.4): As described above, adding 11,254 perfect-score self-generated examples to SFT training produced no improvement over the SFT Baseline (29% wins vs. 30% wins), compared to the large improvements from DPO on preference pairs (e.g., M2 achieving 49.2% wins over the SFT Baseline). This confirms that the contrastive signal provided by losing responses is essential, and that the model's self-evaluations are not accurate enough for simple quality filtering (keeping only the best) to substitute for explicit preference learning.
Self-generated prompt capability (Appendix A.5): The main experiments use a fixed Llama 2-Chat 70B model for prompt generation. The paper manually tests whether the self-rewarding models themselves (M1, M2, M3) can generate novel prompts via in-context learning with 30 test cases. All three models succeed in generating novel instructions given in-context examples in all 30 cases, confirming that the prompt generation step could be brought into the self-contained loop without external models. However, M2 and M3 exhibit a formatting issue: they "first generate a few instructions, then generate a separator, and then start responding to the instructions," requiring postprocessing. This suggests that as models become more fine-tuned on instruction-following, their in-context behavior shifts toward completing the full instruction-response pattern rather than generating only prompts—a practical limitation that existing output parsing could address.
Data distribution visualization (Appendix A.1, Figure 6): The paper presents t-SNE visualizations of instruction and response embeddings for IFT, EFT, and AIFT(M1) data. The IFT and EFT distributions are clearly separated, explaining why joint training does not cause interference (the model can distinguish the two tasks by their input patterns). The IFT and AIFT(M1) distributions overlap substantially, which is "desired" because the self-generated training data should be in-distribution relative to the seed instruction-following data. This visualization provides qualitative support for the compatibility of joint IFT+EFT training and the appropriateness of the self-generated data distribution.
Response length analysis: The paper observes but does not formally ablate the effect of increasing response length across iterations. M1 averages 1,092 characters per response, M2 averages 1,552, and M3 averages 2,552—a 2.3× increase from Iteration 1 to Iteration 3. The paper acknowledges "a known correlation between length and estimated quality" (Section 6) and calls for this to be "understood more deeply." No experiment controls for response length (e.g., by length-penalizing evaluations or training with length-matched pairs), so the extent to which length inflation contributes to the observed win-rate improvements versus genuine quality improvements is not quantified.
Iteration count and saturation: The paper runs exactly three iterations and does not report results for fewer or more. There is no experiment testing whether a fourth iteration would produce further gains or whether saturation occurs. The improvements from M1 → M2 (large jump) to M2 → M3 (smaller but still substantial) suggest diminishing returns are setting in, but the precise saturation point and the shape of the scaling curve remain uncharacterized. The paper explicitly flags this as a limitation (Section 6: "only ran three iterations in a single setting").
Critical Assessment
The experiments provide credible evidence for the paper's central claims, but with several important qualifications that constrain the generality and practical applicability of the findings.
Claim 1: Self-rewarding training improves instruction following across iterations. This claim is well-supported by multiple independent evaluations: GPT-4 head-to-head (Figure 3), AlpacaEval 2.0 (Table 1), MT-Bench (Table 2), and human evaluation (Figure 5). All four evaluation methods show consistent, progressive improvement from M1 to M2 to M3. The magnitude is large—on AlpacaEval, win rate doubles from 9.94% to 20.44% over three iterations—and the human evaluation confirms the GPT-4-based results are not purely an artifact of LLM-judge bias.
However, there is an important confound: response length increases substantially across iterations (1,092 → 1,552 → 2,552 characters on average). GPT-4-based evaluators, including AlpacaEval, are known to exhibit length bias—longer responses tend to receive higher scores even when controlling for quality (Dubois et al., 2023). The paper does not provide any analysis that disentangles length-driven improvement from genuine quality improvement. A simple length-matched ablation (e.g., prompting models to generate responses within a target length range, or normalizing evaluations by response length) would substantially strengthen the claim. Without such analysis, the reported win-rate improvements may partially reflect length inflation rather than improved instruction following per se. The human evaluation (Figure 5) partially mitigates this concern—humans may also exhibit length bias, but the consistency with automatic evaluations suggests the effect is not purely a GPT-4 artifact.
A second qualification: the improvements are primarily in categories like writing, roleplay, and knowledge explanation, with minimal gains in mathematics, coding, and logical reasoning (Figure 4, Table 2 fine-grained results). This suggests that self-rewarding training amplifies existing capabilities—improving the style, completeness, and organization of responses—but does not endow the model with new reasoning skills. This is consistent with the paper's own characterization that the method helps models "better utilize their existing knowledge" rather than acquiring new capabilities, but it bounds the scope of the claim: self-rewarding is effective for alignment-style improvements (helpfulness, thoroughness, clarity) but not for capability extension (better math, better code).
Claim 2: Reward modeling ability improves through self-training iterations. This claim is supported by Table 4, which shows improvement across all five metrics from M1 to M3. The absolute gains are modest—pairwise accuracy improves from 78.7% to 81.7% (+3.0 points over two iterations)—and the paper does not provide confidence intervals, so we cannot assess whether these improvements are statistically significant on the 541-example evaluation set. The consistency across all five metrics (pairwise accuracy, 5-best percentage, exact match, Spearman, Kendall's τ) makes the pattern credible, but the small magnitude and single evaluation set warrant caution in interpreting the practical significance of the reward modeling improvement.
A more fundamental question is whether the improved reward modeling is causally responsible for the instruction-following improvements, or merely correlated with them. The paper hypothesizes that better evaluation → better training data → better generation, but provides no direct test of this causal chain. An alternative interpretation is that the DPO training improves both instruction following and evaluation capability independently (e.g., because DPO implicitly trains a reward function, and this implicit reward function transfers to verbalized evaluation), and that the improved evaluation at iteration t is not actually the driver of improved instruction following at iteration t+1. Disentangling these mechanisms would require experiments that the paper does not run—for instance, comparing DPO training on M2's self-evaluations vs. DPO training on M1's evaluations (to test whether the improvement in evaluation quality matters), or training a separate evaluator model from the same checkpoints and comparing its judgments against the self-rewarding model's judgments.
Claim 3: The model outperforms systems trained on much larger human-annotated or distilled datasets. This claim appears in the AlpacaEval 2.0 comparison (Table 1), where M3's 20.44% win rate exceeds Claude 2 (17.19%), Gemini Pro (16.85%), and GPT-4 0613 (15.76%). The comparison is striking on its face, but important caveats apply:
-
AlpacaEval 2.0 is a single benchmark with known biases (length bias, GPT-4-as-judge bias, a specific prompt distribution). M3's win rate on other leaderboards or benchmarks may differ. The MT-Bench results (7.25 overall for M3) are solid but do not approach GPT-4-level performance (which would be ~9+ on MT-Bench).
-
The "larger human-annotated datasets" claim is about the training data used by competing models (e.g., Llama 2 Chat used >1M human annotations), but the paper does not control for other differences between the models—base model architecture, pretraining data, fine-tuning methodology, etc. Claude 2 and Gemini Pro are entirely different models trained with proprietary data and methods. The comparison shows that self-rewarding on a small seed dataset can produce a model that is competitive with some strong baselines on one benchmark, but it does not isolate the effect of training data size from all other confounding variables.
-
The claim implicitly compares the self-rewarding model's alignment budget (~4,800 seed examples + self-generated data) against the alignment budgets of proprietary systems. But the pretraining budget (Llama 2 70B on 2T tokens) is shared with the base model and represents enormous compute that is not accounted for in this comparison. The paper's claim is about alignment efficiency, not total training efficiency.
What the experiments do not show. Several important questions are left unanswered:
-
Scalability with iterations: Only three iterations were run. Does a fourth, fifth, or tenth iteration continue to improve, or does saturation occur rapidly? The trend from M1→M2 (large gain) to M2→M3 (smaller gain) suggests diminishing returns, but the curve is unknown.
-
Scalability with model size: Only Llama 2 70B was tested. Would self-rewarding work with smaller models (7B, 13B) where the initial LLM-as-a-Judge capability is weaker? Would it work with larger models where the initial evaluation capability is stronger? The mechanism may be sensitive to the base model's ability to produce reliable self-evaluations.
-
Scalability with seed data size: Only 3,200 IFT + 1,630 EFT examples were used. How does the self-rewarding improvement depend on seed data quantity? Could even smaller seeds (e.g., 500 examples) bootstrap the loop? Would larger seeds (e.g., 50,000 examples) produce faster or larger improvements?
-
The role of prompt diversity: The prompt generation step uses an external model generating prompts in the style of the seed IFT data. How does prompt diversity affect the loop? If prompts are too similar, the model may overfit to a narrow instruction distribution. If prompts are too different from the seed data, the model's evaluation capability may not transfer.
-
Safety and harmlessness: The paper explicitly notes (Section 6) that safety evaluations were not conducted, and that exploring safety training within the self-rewarding framework is a clear direction for future work. Given that the self-rewarding loop optimizes for what the model considers "good" responses, and the model's values are initialized from the seed data, any biases or gaps in the seed data could be amplified through iterations. The reward hacking concern flagged in the limitations (Section 6) is not empirically investigated.
-
Comparison to training on the same volume of human-labeled data: The paper compares against models trained on large human annotation sets (e.g., Llama 2 Chat), but these are different models with different base architectures and pretraining. A more controlled comparison would be: train the same Llama 2 70B base model with (a) the self-rewarding protocol vs. (b) DPO on an equivalent volume of human preference pairs vs. (c) DPO on preference pairs from an external AI judge (RLAIF). This would isolate the self-rewarding mechanism from the choice of DPO and the volume of training data.
-
Stability and reproducibility: The paper reports single-run results with no error bars, no multiple seeds, and no analysis of variance across training runs. Given the iterative, self-reinforcing nature of the training loop, small variations in early self-evaluations could compound across iterations, potentially leading to divergent outcomes. Without reproducibility analysis, the reliability of the reported improvements across different random seeds or data orderings is unknown.
6. Limitations and Trade-offs
The Saturation Point of Iterative Self-Training Is Completely Unknown
The assumption or constraint. The paper runs exactly three iterations of self-rewarding training () and observes improvements at each step, but provides no evidence about what happens beyond three iterations. The authors explicitly acknowledge this gap: "only ran three iterations in a single setting. A clear line of further research is to understand the 'scaling laws' of this effect both for more iterations, and with different language models with more or less capabilities in different settings" (Section 6). The improvement trajectory from Iteration 1 to 2 (AlpacaEval win rate: 9.94% → 15.38%, a +5.44 point gain) to Iteration 2 to 3 (15.38% → 20.44%, a +5.06 point gain) shows a slight decrease in incremental gain, but three data points are insufficient to characterize whether this is the beginning of a plateau, a linear improvement regime, or something else entirely. More critically, no experiment tests whether the self-rewarding signal remains reliable as the model's output distribution shifts further from the seed data that initially trained the evaluator. Without a saturation analysis, the paper cannot claim to have demonstrated continual self-improvement—only that three iterations work.
The consequence. A practitioner considering deployment cannot predict how many iterations to run or what compute budget to allocate. If saturation occurs at iteration 4 or 5, the method may not justify the computational expense of additional iterations. If the model eventually starts producing self-evaluations that are worse than previous iterations (e.g., due to distribution shift or reward over-optimization corrupting the evaluation capability), additional iterations could actively degrade the model—a failure mode the paper flags as a possibility ("It would also be good to understand if so-called 'reward-hacking' can happen within our framework, and in what circumstances," Section 6) but does not investigate. The entire "virtuous circle" framing depends on the assumption that both capabilities co-improve across iterations; if one side of the circle breaks down after enough iterations, the framework collapses. Without scaling laws or at least evidence of behavior beyond three iterations, the long-term viability of self-rewarding training is speculative.
What evidence exists in the paper. Only the three-iteration trajectory. The reward modeling metrics (Table 4) show modest, consistent improvement (pairwise accuracy: 78.7% → 80.4% → 81.7%; gains of +1.7 then +1.3 points), but this is a short sequence and the diminishing increments are apparent. The instruction-following gains (Figure 3, Table 1) show a similar pattern of large gains from to and continued but slightly moderated gains from to . There is no experiment extending to four, five, or more iterations, nor any ablation studying what happens when the iterative loop is stopped at different points. The paper provides no analysis of whether the self-generated preference data quality (as distinct from the model's evaluation metric scores on a fixed held-out set) changes across iterations.
Mitigation status. The paper explicitly calls for future work on scaling laws (Section 6) and does not claim results beyond three iterations. The limitation is transparently disclosed. No mitigation is attempted—the paper simply treats three iterations as a proof of concept and leaves the saturation question to future investigation. This is a reasonable scope for an initial paper introducing a new paradigm, but it means the practical guidance for deployment ("run until you see diminishing returns, then stop") is not empirically grounded.
Response Length Inflation Confounds the Instruction-Following Gains
The assumption or constraint. The paper's central claim of improving instruction-following ability relies heavily on GPT-4-based evaluations (AlpacaEval 2.0, head-to-head comparisons) that are known to exhibit length bias—longer responses tend to receive higher scores even when controlling for quality (Dubois et al., 2023). The paper acknowledges this directly: "We observed an increase in length in model generations, and there is a known correlation between length and estimated quality, which is a topic that should be understood more deeply in general, and in our results in particular as well" (Section 6). The data point is striking: model response lengths on AlpacaEval increase from an average of 1,092 characters for to 1,552 for to 2,552 for (Section 3.2.1)—a 2.3× increase over three iterations. This means the iterative DPO training is systematically producing longer responses, and it is unclear how much of the reported win-rate improvement (9.94% → 15.38% → 20.44% on AlpacaEval) reflects genuine quality improvement versus length-driven evaluator preference.
The consequence. If the improvement is substantially driven by length inflation, several interpretations shift. First, the self-rewarding loop may be optimizing for verbosity rather than quality—the model's self-evaluations may reward longer responses (the additive 5-point rubric includes criteria like "well-organized" and "comprehensive," which correlate with length), DPO training amplifies this preference, and subsequent iterations produce increasingly verbose outputs. This would mean the virtuous circle is partially a "length circle"—the model learns to write longer answers, its self-evaluations reward longer answers, and the preference data reinforces length. Second, on evaluation benchmarks or deployment scenarios where length is controlled or verbosity is penalized, the self-rewarding models might not show the same gains. Third, the comparison with other models on the AlpacaEval leaderboard (Table 1) is confounded by length differences—if produces substantially longer responses than, say, GPT-4 0613, its higher win rate may partially reflect length rather than quality. The human evaluation results (Figure 5) provide some validation that the improvements are not purely a GPT-4 artifact, but humans can also exhibit length bias, and the 50-prompt human evaluation sample is small relative to the 805-prompt AlpacaEval evaluation.
What evidence exists in the paper. The paper reports the length figures (1,092, 1,552, 2,552 characters) in Section 3.2.1 and acknowledges the confound in Section 6. The human evaluation (Figure 5) shows that and do outperform the SFT Baseline in human judgments, which partially addresses the concern—but the human evaluation uses only 50 prompts, does not control for length, and shows a pattern broadly consistent with the length increase (M3 > M2 > SFT Baseline). There is no experiment that controls for response length—for instance, by prompting models to produce responses within a target length, by length-normalizing evaluation scores, or by training with length-matched preference pairs. The paper does not report the response lengths of competing models on the AlpacaEval leaderboard, making the comparison to Claude 2, Gemini Pro, and GPT-4 0613 uninterpretable along this dimension.
Mitigation status. The paper acknowledges the issue (Section 6) and calls for deeper understanding, but performs no mitigation. The human evaluation provides partial validation but does not control for length. This limitation is significant because it undermines the paper's headline performance claims—the 20.44% AlpacaEval 2.0 win rate cannot be attributed purely to instruction-following quality improvement without quantifying the length contribution. A straightforward mitigation would be to report AlpacaEval length-controlled win rates (which the AlpacaEval 2.0 framework itself supports via length-matched baselines) or to train a length-penalized variant of the self-rewarding model, but neither is attempted.
The Method Improves the Model's Use of Existing Knowledge but Does Not Extend Capability Boundaries
The assumption or constraint. The self-rewarding framework assumes that the model can, through iterative self-evaluation and preference optimization, improve its instruction-following behavior. The paper's experiments reveal a sharp boundary on what this improvement encompasses: the gains are concentrated in tasks requiring style, thoroughness, clarity, and knowledge synthesis, while tasks requiring reasoning, mathematics, coding, and problem-solving show negligible or no improvement. The paper explicitly notes this: "Self-Rewarding models can substantially improve the win rate in most categories, but there are some tasks for which this approach does not improve, such as mathematics and logical reasoning, indicating that our current training approach mainly allows the models to better utilize their existing knowledge" (Section 3.2.1, discussing Figure 4).
The consequence. This capability boundary has two important implications. First, self-rewarding training is not a general-purpose improvement mechanism—it is an alignment technique that makes the model more helpful, thorough, and well-formatted within its existing competence envelope, but cannot compensate for fundamental capability gaps. A model that cannot reliably solve math problems after pretraining and seed fine-tuning will not learn to do so through self-rewarding, because its self-evaluations cannot recognize correct solutions that it cannot generate, and its preference pairs will not contain examples of correct mathematical reasoning to learn from. Second, this means the self-rewarding framework's effectiveness is tightly coupled to the seed data distribution. If the seed IFT data (Open Assistant) underrepresents reasoning tasks—as the paper acknowledges it does ("the latter is due to the seed prompts we use from Open Assistant tending to underemphasize the reasoning-based tasks," Section 3.2.1)—then the self-rewarding loop will not improve reasoning regardless of how many iterations are run, because the model never sees high-quality examples of reasoning in its training data to learn an effective evaluation criterion for it.
What evidence exists in the paper. The evidence is strong and consistent across multiple evaluations. The AlpacaEval category breakdown (Figure 4) shows categories like Mathematics hovering near zero win rate across all iterations, with showing no improvement over . The MT-Bench fine-grained results (Table 2, Table 10) show the "Math, Code & Reasoning" aggregate improving only from 3.83 to 4.17 (out of 10) across iterations, versus "Humanities, STEM, Roleplay, Writing & Extraction" improving from 8.55 to 9.10. The NLP benchmark results (Table 3, Table 9) show GSM8K (math) and ARC-Challenge (reasoning) remaining roughly flat or declining slightly across iterations—GSM8K actually drops from 60.27 () to 57.70 (), suggesting the alignment training may mildly interfere with mathematical reasoning capability. The categories that improve most—Writing (8.83 → 9.58), Roleplay (8.15 → 8.73), Extraction (6.90 → 7.80)—are all tasks where better organization, more thorough coverage, and clearer writing translate directly to higher scores, consistent with the "better utilizing existing knowledge" interpretation.
Mitigation status. The paper does not attempt to mitigate this limitation. It acknowledges that the seed data composition likely drives the capability boundary (Section 3.2.1) and suggests that "a clear future direction is to extend the self-rewarding paradigm to these types of tasks, by relying not only on seed prompts from Open Assistant, but also on seed prompts found in a larger variety of datasets" (Section 3.2.1). This is a reasonable suggestion, but it is untested—there is no experiment showing that including math seed data would actually produce self-rewarding improvements in math, which depends on the model's ability to self-evaluate mathematical reasoning quality. Given that mathematical correctness is a more objective criterion than writing quality, self-evaluation of math may be harder to bootstrap from weak initial capability, and the self-rewarding loop may not transfer to such domains even with appropriate seed data.
Safety and Reward Hacking Are Not Investigated, Leaving the Self-Rewarding Loop's Downside Risk Uncharacterized
The assumption or constraint. The paper explicitly states that safety evaluation was not conducted: "Another clear further avenue of study is to conduct safety evaluations—and to explore safety training within our framework" (Section 6). The self-rewarding loop optimizes the model toward what its own evaluator considers good responses, with the evaluator's values initialized from a small seed of human-authored data (Open Assistant). This means any biases, gaps, or value misalignments present in the seed data could be amplified through iterative self-training. Furthermore, the paper acknowledges the possibility of reward hacking: "It would also be good to understand if so-called 'reward-hacking' can happen within our framework, and in what circumstances" (Section 6). Reward hacking in this context would mean the model learning to produce responses that score highly under its own LLM-as-a-Judge evaluation (e.g., by exploiting the additive scoring criteria) without genuinely being better—a dynamic analogous to the verifier over-optimization documented in the analyzed paper's search experiments, but here occurring across training iterations rather than within a single inference budget.
The consequence. In a deployment context, the self-rewarding loop could produce models that are optimized for criteria the evaluator can easily verify (length, formatting, keyword inclusion, surface-level relevance) while neglecting or degrading harder-to-evaluate qualities like factual accuracy, harmlessness, or nuanced appropriateness. Since the evaluator is the model itself—and both the evaluator and the policy are improving together—there is no external check on whether the improvements are genuine or are co-adaptation to a flawed evaluation criterion. A concrete scenario: if the additive scoring rubric's criteria (relevance, coverage, usefulness, clarity, expertise) can be partially satisfied by verbose, well-structured responses that sound authoritative but contain subtle errors, the self-rewarding loop might reinforce this pattern, producing models that are more convincing but not more correct. The paper provides no evidence about whether this occurs—no factuality evaluation, no safety benchmark, no analysis of whether later iterations of the model become more or less truthful.
What evidence exists in the paper. Essentially none. Safety is mentioned only as a future direction (Section 6). The reward hacking concern is mentioned but not investigated. The increasing response length across iterations (1,092 → 2,552 characters) could be interpreted as a benign form of reward hacking—the model learns that longer, more comprehensive responses score higher under the additive rubric—but whether this crosses into pathological behavior (e.g., generating length without substance) is not analyzed. There is no experiment testing whether the self-rewarding loop amplifies biases present in the seed data (e.g., the Open Assistant data's demographic, cultural, or political skews). There is no red-teaming or adversarial evaluation of the final models. The NLP benchmark results (Table 3, Table 9) show mild declines on some knowledge-intensive tasks (NQ drops from 35.48 for to 31.86 for ) which could indicate factual degradation, but the paper does not investigate this pattern.
Mitigation status. The paper proposes (in Section 6) that future work could explore safety training within the self-rewarding framework by "using the LLM-as-a-Judge procedure to evaluate for safety specifically in our self-rewarding training process" and speculates that "later iterations being able to catch and mitigate more challenging safety situations that earlier iterations cannot." This is speculative—it assumes that safety evaluation capability improves through the same task-transfer mechanism that improves general evaluation, but safety evaluation may require different capabilities (moral reasoning, harm recognition) that the seed data touches only lightly if at all. No safety-specific EFT data, safety-focused preference pair construction, or constraint mechanism is tested. For practical deployment, the absence of any safety characterization makes the self-rewarding approach difficult to adopt without substantial additional safety infrastructure that the paper does not provide.
The Difficulty Estimation Pre-Cost for the Reward Signal (Generating and Evaluating Candidate Responses) Is Not Amortized in the Headline Efficiency Claims
The assumption or constraint. The paper's narrative emphasizes data efficiency—the model is trained from only 4,830 seed examples plus self-generated data, in contrast to systems using "over 1M annotations" (Section 3.2.1). However, the computational cost of generating that self-labeled data is substantial and unaccounted for in any efficiency comparison. Each preference pair used for DPO training requires: generating one new prompt (via an external model or self-generation), sampling 4 candidate responses from a 70B model, and evaluating those 4 responses 3 times each (to reduce score variance) using the same 70B model with LLM-as-a-Judge prompting. For AIFT() with 3,964 preference pairs, this is approximately forward passes through a 70B parameter model just for data generation, before any DPO training begins. For AIFT() with 6,942 pairs, the cost is proportionally higher. These costs are incurred at each iteration and scale with model size, number of candidate responses , and number of evaluation samples per response.
The consequence. The headline comparison—self-rewarding on 4,830 seed examples vs. competitors using millions of human annotations—is apples-to-oranges in terms of resource accounting. Human annotation has a financial cost; self-rewarding has a computational cost. A fair comparison would ask: given a total compute budget, is it more effective to (a) collect human preference data (incurring financial cost but zero model inference cost), (b) use an external AI judge like GPT-4 for evaluation (incurring API cost), or (c) self-evaluate with the training model (incurring inference cost on one's own hardware)? The paper provides no such comparison. For a practitioner with limited GPU resources, the inference cost of self-rewarding at scale may be prohibitive even if the seed data requirement is low. Additionally, the cost scales poorly: each iteration's data generation requires running the current model (which is itself the product of expensive training) on potentially tens of thousands of inference calls, and the data volume increases with each iteration (3,964 → 6,942 pairs). If many iterations are needed for substantial improvement, the total inference cost could rival or exceed the pretraining cost of the base model—a regime the analyzed paper studied explicitly with its FLOPs-matched pretraining-vs-inference comparison, but which this paper does not address.
What evidence exists in the paper. None. The paper reports the number of preference pairs generated (3,964 for AIFT(), 6,942 for AIFT()) and the generation/evaluation procedure (4 candidates, 3 evaluations each), from which the inference cost can be roughly calculated, but the paper does not report total FLOPs, GPU-hours, wall-clock time, or any cost metric. There is no comparison of the computational cost of self-rewarding against the cost of alternative data generation approaches (human annotation, external AI judge API calls, fixed reward model scoring). The paper's AlpacaEval leaderboard comparison (Table 1) compares only final model quality, not the resource expenditure required to achieve it.
Mitigation status. The paper does not acknowledge this as a limitation or propose any cost analysis. The data efficiency narrative (emphasizing the small seed dataset) implicitly frames self-rewarding as resource-efficient, but this framing counts only one type of resource (human-labeled data) while ignoring another (compute). A proper accounting would include both, and the absence of such accounting makes it impossible to assess whether self-rewarding is practically efficient—as opposed to data-efficient—compared to alternatives. This is particularly relevant given that the paper targets the open-source and resource-constrained community (using Llama 2 and Open Assistant rather than proprietary models and datasets), where compute budgets may be as constrained as annotation budgets.
7. Implications and Future Directions
How This Work Changes the Landscape
This paper does not introduce a new architecture, loss function, or optimization algorithm. Its impact is architectural in a different sense: it reorganizes the relationship between the components of an alignment pipeline, collapsing the policy and the reward model into a single entity that co-improves, and it provides the first empirical demonstration that this co-improvement actually occurs across multiple iterations. This is a reframing rather than a paradigm shift—it changes how researchers should think about the alignment data bottleneck, but the underlying components (LLM-as-a-Judge, DPO, iterative training) are all adopted from prior work.
The reframing: reward models are not static infrastructure. Before this paper, the dominant mental model for alignment was bipartite: a policy model produces outputs, and a separate, frozen reward mechanism (human annotators, a trained reward model, or an external AI judge) evaluates them. The reward signal was treated as infrastructure—something you build once and then use. This paper demonstrates that the reward signal can be a capability that lives inside the model itself and improves through training. The implication is that the ceiling on alignment quality is not set by the quality of a fixed reward dataset or model, but by the model's capacity to improve its own judgment through iterative self-training.
This shifts the research question from "how do we collect better training signal?" (more annotators, better prompts, distillation from stronger models) to "how do we design training loops where the model's evaluation capability and generation capability reinforce each other?" The paper shows that the evaluation capability does improve without explicit evaluation-specific training after the initial seed (Table 4: pairwise accuracy rises from 78.7% to 81.7% across iterations, while receiving only IFT-format preference data). This is the "task transfer" mechanism the paper hypothesizes—better instruction following makes the model better at the LLM-as-a-Judge instruction-following task—and if it generalizes, it means alignment pipelines can be self-bootstrapping rather than externally limited.
Reconciling contradictions in the literature. The paper helps reconcile a tension between two observations in prior work. On one hand, Huang et al. (2023) and others found that LLMs struggle to self-correct reasoning errors—prompting a model to evaluate its own outputs often fails to produce reliable improvements. On the other hand, LLM-as-a-Judge prompting (Zheng et al., 2023b) and RLAIF (Lee et al., 2023) showed that LLMs can evaluate outputs usefully, at least when the evaluator is a separate, stronger model. The Self-Rewarding framework suggests a resolution: self-evaluation works when (a) the model is explicitly trained to perform evaluation (via EFT data), (b) the evaluation task is decomposed into cumulative binary criteria rather than holistic judgment (the additive rubric), and (c) evaluation and generation co-improve through iterative training. The failure cases in prior work may reflect models that were not trained for evaluation, prompted with poorly structured evaluation formats, or asked to evaluate without the benefit of joint generation-evaluation training. The paper's finding that the Li et al. (2024) holistic-bucket prompt achieves only 26.6% pairwise accuracy (essentially random) for the same model that achieves 65.1% with the additive prompt (Appendix Table 5) concretely demonstrates that evaluation quality is highly sensitive to prompt structure—a methodological lesson that explains why some prior work found LLM self-evaluation ineffective.
Research directions that become more attractive:
- Unified policy-reward model architectures where a single model serves both roles during both training and inference, rather than the standard RLHF separation. The paper's demonstration that joint IFT+EFT training incurs no instruction-following penalty (Figure 3: ties with SFT Baseline at 30.5% vs. 30.9% wins) removes a key objection to unified approaches.
- Iterative self-improvement loops as a general alignment paradigm, extending beyond single-turn instruction following to multi-turn dialogue, tool use, code generation, and safety-critical domains. The paper's three-iteration demonstration provides a template, but the saturation behavior, scaling properties, and domain boundaries are open questions.
- Prompt engineering for evaluation as a first-class research problem. The dramatic difference between the additive rubric (65.1% pairwise accuracy) and the holistic-bucket prompt (26.6%) for the same model on the same data shows that evaluation prompt design is not cosmetic—it determines whether self-generated training signals are useful or actively harmful. This opens a systematic research direction around what properties make an evaluation prompt effective for self-training.
- Data-efficient alignment that does not require large human annotation teams or distillation from proprietary models. The paper's 20.44% AlpacaEval 2.0 win rate from only 4,830 seed examples challenges the assumption that competitive alignment requires hundreds of thousands of human annotations.
Research directions that become less attractive (or require rethinking):
- Fixed reward model training as the default alignment paradigm. If a model co-trained on generation and evaluation can produce self-improving training signals, investing heavily in training a separate, frozen reward model becomes harder to justify. The effort might be better spent on designing effective self-evaluation prompts and seed EFT datasets.
- RLAIF with external, frozen judges. If the model's own evaluation capability improves through self-training, an external judge (especially a weaker or equal-capability one) may provide no benefit over self-evaluation after the first iteration, and its static nature may become a bottleneck.
- Pure prompt-based self-correction without training. The paper's negative result in Appendix A.4—adding 11,254 perfect-score self-generated examples to SFT produced no improvement—shows that simply generating and filtering outputs is not enough. The preference-based contrastive signal (winning vs. losing responses via DPO) is essential. This suggests that self-improvement requires explicit preference optimization, not just generation and filtering.
Follow-Up Research This Work Enables
1. Scaling laws for self-rewarding iterations: when does the virtuous circle saturate or collapse? The paper runs exactly three iterations and observes diminishing but still positive gains (AlpacaEval win rate: +5.44 points from M1→M2, +5.06 points from M2→M3; reward modeling pairwise accuracy: +1.7 points, then +1.3 points). The most urgent open question is what happens beyond three iterations. A systematic study would run 10+ iterations with the same protocol and track (a) instruction-following performance on AlpacaEval and MT-Bench, (b) reward modeling accuracy on the EFT evaluation set, and (c) the quality of the self-generated preference data itself (e.g., by measuring the agreement between the model's scores at iteration and human rankings on the generated pairs, or by having GPT-4 adjudicate the preference pairs). The key measurement is the iteration at which reward modeling accuracy stops improving or starts declining—this would identify the saturation point beyond which additional self-training provides no benefit or actively harms the model. A strong follow-up would characterize whether saturation is caused by (i) the model's evaluation capability hitting a ceiling, (ii) the preference data distribution becoming stale (the model's generations no longer contain sufficient diversity for informative preference pairs), or (iii) some form of reward over-optimization where the model learns to exploit its own evaluation criteria. This study would directly address the "scaling laws" question the paper flags in Section 6 and determine whether self-rewarding is a practical long-term training strategy or a short-term bootstrapping mechanism.
2. Disentangling the causal mechanism: does improved evaluation actually cause better instruction following, or are both simply joint effects of DPO training? The paper observes that both instruction following and reward modeling improve across iterations, and hypothesizes that better evaluation → better preference data → better instruction following, with better instruction following → better evaluation completing the loop. But the observed correlation does not establish this causal chain. A strong follow-up would test causality directly: train Iteration 2 using preference pairs constructed by 's evaluations (the standard protocol), but also train an alternative Iteration 2 using preference pairs constructed by a frozen version of 's evaluations (the same pairs, so evaluation quality is held constant rather than improving). If the standard protocol's Iteration 2 outperforms the frozen-evaluation Iteration 2 on instruction following at Iteration 3, this would show that the improvement in evaluation quality specifically drives gains. Another variant: use the evaluations from (which are better, per Table 4) to relabel the preference pairs used to train itself, and measure whether training on the higher-quality labels yields a better model. If not, the evaluation improvement may be epiphenomenal rather than causal. This experiment would clarify whether improving reward modeling ability is a mechanism for instruction-following improvement or merely a correlated side effect.
3. Domain boundaries of the self-rewarding loop: why does mathematics and reasoning not improve, and can seed data diversity fix it? The paper's fine-grained AlpacaEval analysis (Figure 4) shows near-zero win rates in Mathematics across all iterations, and MT-Bench (Table 2, Table 10) shows the Math, Code & Reasoning aggregate improving only from 3.83 to 4.17 (out of 10), compared to 8.55 to 9.10 for humanities and writing tasks. The paper hypothesizes this is because the Open Assistant seed data underrepresents reasoning tasks, but an alternative hypothesis is that self-evaluation of mathematical correctness is fundamentally harder than self-evaluation of writing quality—the model may not be able to reliably distinguish correct from incorrect mathematical solutions even with appropriate seed data, because the correctness signal requires multi-step verification rather than surface-level criteria assessment. A strong follow-up would test these competing hypotheses: construct a seed dataset that includes a substantial fraction of math and code examples (e.g., by supplementing Open Assistant with examples from GSM8K training data and HumanEval-style coding tasks, with corresponding EFT data teaching the model to evaluate math solutions and code correctness), then run the same three-iteration self-rewarding protocol. If math and code performance now improve, the bottleneck is seed data diversity. If they still do not improve, the bottleneck is the model's inability to self-evaluate objective correctness accurately enough to construct useful preference pairs—which would reveal a fundamental capability boundary for self-rewarding training.
4. The role of response length: what fraction of self-rewarding gains are length artifacts versus genuine quality improvements? The paper reports that response length increases from 1,092 to 1,552 to 2,552 characters across iterations (Section 3.2.1) and acknowledges length bias in GPT-4 evaluations as a confound (Section 6). The critical experiment is to evaluate the self-rewarding models under length-controlled conditions. A straightforward approach: use the AlpacaEval 2.0 length-controlled evaluation mode (which the framework supports), or prompt all models with a length constraint (e.g., "respond in no more than 500 characters") and re-evaluate on AlpacaEval and head-to-head. A more controlled experiment: during DPO training, construct preference pairs where the winning and losing responses are length-matched (e.g., by selecting pairs with approximately equal character counts, or by truncating responses to equal lengths before scoring). If the length-controlled evaluation shows substantially smaller gains across iterations than the standard evaluation, the self-rewarding loop is partly optimizing for verbosity rather than quality—an important caveat for deployment in settings where conciseness matters. If the gains persist under length control, the self-rewarding signal is genuinely improving response quality independent of length, which would substantially strengthen the paper's central claim. Additionally, measuring whether the model's self-evaluations exhibit length bias (e.g., by scoring length-matched pairs and checking whether longer responses receive higher scores at equal quality) would reveal whether the length inflation is driven by the evaluation rubric or by DPO optimization dynamics.
5. Self-rewarding from scratch: what is the minimum seed data and base model capability needed to bootstrap the loop? The paper uses a specific configuration: Llama 2 70B as the base model, 3,200 IFT + 1,630 EFT seed examples from Open Assistant, an additive 5-point evaluation rubric, and an external model for prompt generation (though Appendix A.5 shows self-generation is possible). This leaves open the question of how sensitive the self-rewarding loop is to each of these components. A systematic study would vary: (a) base model size (7B, 13B, 70B) to test whether smaller models with weaker initial evaluation capability can sustain the loop; (b) seed data size (500, 1,000, 3,200, 10,000 IFT examples) to find the minimum viable seed; (c) seed data source (Open Assistant vs. other instruction datasets like Dolly, SuperNI, or ShareGPT) to test whether dataset-specific biases affect the loop; (d) evaluation rubric design (additive vs. holistic vs. pairwise comparative) to identify which prompt structures support self-improvement; and (e) prompt generation source (external model vs. self-generation vs. fixed seed prompts only) to test whether prompt diversity is necessary for sustained improvement. The key output would be a "recipe" specifying the minimum bar for self-rewarding to work, which would guide practitioners considering adoption. The experiment would also reveal whether self-rewarding is feasible for the 7B/13B model scale where compute constraints are tighter but initial evaluation capability is weaker—a critical question for the open-source community.
6. Safety dynamics in self-rewarding loops: does iterative self-training amplify or mitigate harmful behaviors? The paper explicitly does not conduct safety evaluations (Section 6) and proposes as future work using "the LLM-as-a-Judge procedure to evaluate for safety specifically." The critical experiment is to run the self-rewarding loop with safety-specific seed EFT data—teaching the model to evaluate responses for harmfulness, toxicity, and refusal quality, alongside the general quality criteria—and measure whether (a) the model's safety evaluation capability improves across iterations (analogous to the quality evaluation improvement in Table 4), and (b) the model's actual safety behavior improves (e.g., lower toxicity scores on RealToxicityPrompts, higher refusal rates on harmful requests). More importantly, a negative-result experiment would run the standard self-rewarding loop (without safety-specific EFT) and measure whether safety degrades across iterations—if the model learns to optimize for helpfulness and thoroughness without safety constraints, later iterations might become more willing to comply with harmful requests while providing more detailed, helpful-sounding harmful responses. This would reveal a critical risk: self-rewarding without explicit safety training could amplify a model's harmful capabilities even as its helpfulness improves. A strong follow-up would also test whether safety evaluations can be incorporated into the preference pair construction (e.g., discarding pairs where the winning response is harmful, or adding safety score as a tiebreaker) and whether this provides sufficient implicit safety regularization to prevent degradation.
Practical Applications and Downstream Use Cases
1. Cost-efficient alignment for open-source models. The most direct application is reducing the human annotation burden for aligning open-source instruction-following models. The paper demonstrates that starting from only 4,830 human-authored seed examples (3,200 IFT + 1,630 EFT), three iterations of self-rewarding training produce models competitive with systems trained on orders of magnitude more human data (the paper contrasts with Llama 2 Chat's >1M annotations). For open-source teams with limited annotation budgets—academic labs, startups, community projects—this means alignment quality previously achievable only with large-scale human annotation or costly API distillation from GPT-4 can potentially be approached with a small seed dataset and GPU-time for self-training. The practical pipeline is: (1) collect a small, high-quality seed of instruction-response pairs and evaluation examples in the additive rubric format; (2) run SFT on the combined IFT+EFT seed data; (3) run Self-Instruction creation and Iterative DPO for 2–3 iterations. The paper's evidence that both instruction following and evaluation capability improve (Table 4, Figure 3) suggests the investment in each iteration compounds. The primary cost is inference compute for generating and evaluating candidate responses—approximately forward passes through a large model per iteration (e.g., ~63,000 passes for the first iteration's 3,964 pairs with 4 candidates and 3 evaluations each), which is substantial but may compare favorably to equivalent human annotation costs at scale.
2. Domain-specific alignment for specialized assistants. The self-rewarding framework is particularly well-suited for domain adaptation where human annotation is expensive and scarce—medical question-answering, legal document summarization, scientific literature review, technical support. A domain expert would need to produce only a modest seed of IFT examples (a few hundred to a few thousand) demonstrating desired behavior, plus EFT examples teaching the model how to evaluate responses in that domain according to domain-specific criteria (accuracy, appropriate use of terminology, adherence to professional guidelines). The model then self-generates additional training data through the iterative loop. The paper's finding that the method improves most on tasks where the model can "better utilize existing knowledge" (Section 3.2.1, discussing Figure 4) is actually an advantage here: domain adaptation is precisely about shaping how the model deploys its pretrained knowledge, and the self-rewarding loop excels at improving completeness, clarity, and domain-appropriate formatting. A medical QA system might improve through iterations by learning to consistently cite sources, qualify uncertainty, and structure responses for clinical readability—behaviors that the evaluator can assess through criteria-based scoring even without deep medical expertise. The practical requirement is that the domain expert can articulate evaluation criteria (as the paper does for general instruction following) and provide enough seed EFT examples for the model to learn the evaluation rubric.
3. Data generation for self-improving chatbots and assistants. Beyond one-time alignment, the self-rewarding framework provides a continuous improvement mechanism for deployed chatbots. User interactions naturally produce a stream of prompts and model responses. If the model can self-evaluate its responses (using the LLM-as-a-Judge mechanism) and identify cases where it performed poorly, those cases become preference pairs—pairing the low-scored response with a re-generated, higher-scored alternative—for periodic DPO fine-tuning. This creates an online learning loop: the model improves from its own mistakes without requiring human raters to review every interaction. The paper's finding that even without explicit EFT training, general instruction-following improvement transfers to better evaluation (Table 4, reward modeling improves from 78.7% to 81.7% despite no additional EFT data after ) suggests that a deployed model's evaluation capability would also improve over time, making the error detection increasingly reliable. The practical barriers are: (1) ensuring the self-evaluation prompt is robust enough for production use (the additive rubric with chain-of-thought justification provides a template), (2) filtering interactions to avoid training on harmful or private content, and (3) managing the computational overhead of periodic retraining. The paper's negative result in Appendix A.4 (adding only positive examples to SFT produced no improvement) indicates that the preference contrast is essential—the model must see pairs of good and bad responses, not just additional positive examples—which means the online loop must capture and contrast both successful and unsuccessful interactions.
When to Prefer This Method
The paper does not present a formal decision framework or head-to-head comparison against named alternative alignment methods under controlled conditions. It demonstrates that self-rewarding works for a specific configuration (Llama 2 70B + Open Assistant seed + additive rubric + Iterative DPO) and compares the resulting models against leaderboard entries that differ in base model, pretraining data, alignment data scale, and alignment methodology. The paper positions self-rewarding as a conceptual alternative to fixed-reward-model approaches and distillation-based methods, but does not provide the controlled experiments needed to say "prefer self-rewarding over RLHF when X" or "over RLAIF when Y." The paper offers evidence that self-rewarding is viable and competitive, not that it is superior under specific conditions. A decision matrix would therefore be speculative rather than paper-grounded. The practical guidance the paper does provide—through its experimental setup and results—is that self-rewarding is an attractive option when:
- Human annotation budget is very limited (the paper uses only 4,830 seed examples)
- Access to stronger proprietary models for distillation is unavailable (the paper uses only Llama 2 models, no GPT-4 targets)
- The goal is to improve helpfulness, thoroughness, and clarity on open-ended instruction-following tasks, not to acquire new reasoning or knowledge capabilities (the paper's gains are concentrated in writing, roleplay, and knowledge synthesis, not math or coding)
The paper does not claim that self-rewarding should replace RLHF, RLAIF, or distillation-based methods in all cases, and the absence of controlled comparisons means that direct efficiency claims (self-rewarding vs. equivalent-budget human annotation or external AI feedback) remain hypotheses for future work rather than established findings.