CARM: Cancellation-Aware Response Masking for LLM Reinforcement Learning

cs.LG cs.AI cs.CL Yafei Zhang, Songshuo Lu, Sicong Liao, Zhi Chen, Yaohua Tang · Oct 1, 2026
Local to this browser
What it does
CARM targets off-policy drift in LLM reinforcement learning by preventing signed token log-ratios from canceling in sequence-level response masks. The core idea is to average absolute log-ratios rather than signed ones, which stops...
Why it matters
The method is evaluated on Qwen3. 5 models and shows consistent gains over geometric-mean and token-level baselines.
Main concern
CARM is a well-motivated and theoretically grounded response-level filter that delivers consistent, if modest, empirical gains over sequence- and token-level baselines. The cancellation critique is airtight, the derived frequency–severity...
Community signal
0
0 up · 0 down
Sign in to vote with arrows
AI Review AI reviewed
Plain-language introduction

CARM targets off-policy drift in LLM reinforcement learning by preventing signed token log-ratios from canceling in sequence-level response masks. The core idea is to average absolute log-ratios rather than signed ones, which stops bidirectional policy drift from being hidden by the geometric mean. It also proves a joint bound on the fraction and severity of out-of-band token ratios for any accepted response. The method is evaluated on Qwen3.5 models and shows consistent gains over geometric-mean and token-level baselines.

Critical review
Verdict
Bottom line

CARM is a well-motivated and theoretically grounded response-level filter that delivers consistent, if modest, empirical gains over sequence- and token-level baselines. The cancellation critique is airtight, the derived frequency–severity budget is elegant, and the experiments span two model sizes and two domains. However, the evaluation is limited to Qwen3.5 models and GRPO-style training, and the paper does not release code, which will slow independent verification.

“positive and negative log-ratios can cancel. For example, token ratios of $10$ and $0.1$ have a geometric mean of one, although each sampled-token probability has changed tenfold.”
Zhang et al. · Section 1
“CARM achieves the highest four-dataset average for both Qwen3.5-4B and Qwen3.5-9B.”
Zhang et al. · Section 4.2
What holds up

The paper’s central insight—that averaging signed log-ratios can mask severe per-token drift—is demonstrated with a tight constructive proof in Proposition 1. The theoretical follow-through is strong: Proposition 3 gives a deterministic joint bound on both the fraction of violating tokens and their mean log-distance beyond a prescribed band, giving the threshold a concrete token-level interpretation. Empirically, CARM obtains the highest average scores on math and code benchmarks for both model sizes, and paired-score diagnostics show the gains are not reducible to simply masking more sequences.

“For any $B>1$ and any $1
Zhang et al. · Proposition 1
“If $s_{\mathrm{CARM}}(y) \leq \tau$ with $\tau \geq 1$, then $p_{-}b_{-}+p_{+}b_{+}+p_{\mathrm{out}}\bar{\delta}_{\mathrm{out}}(y) \leq \log \tau$.”
Zhang et al. · Proposition 3
Main concerns

A primary limitation is the narrow empirical scope: all experiments use Qwen3.5-4B and Qwen3.5-9B with GRPO, leaving open whether absolute aggregation generalizes to other architectures, model scales, or RL algorithms such as PPO with a learned critic. The mixed per-year AIME results for the smaller model—where CARM trails GeoMean on AIME 2026—suggest gains are not guaranteed at every scale.

Additionally, the threshold grids differ between GeoMean and CARM, so some fraction of the reported improvement may stem from better threshold tuning rather than the aggregation principle itself, though the authors note that comparable filtering rates still favor CARM.

“For Qwen3.5-4B, CARM improves AIME 2024, ties on AIME 2025, and is slightly lower on AIME 2026, while improving the aggregate.”
Zhang et al. · Section 4.2
“On Qwen3.5-9B, CARM outperforms GeoMean by 3.47 points while their masked fractions differ by only 0.43 points. Accuracy is not monotone in the masked fraction, and TRM rejects more responses without outperforming CARM.”
Zhang et al. · Section 5.1
Evidence and comparison

The evidence supports the main claims, but comparisons could be tighter. The threshold sweep in Appendix E shows that CARM’s best threshold outperforms GeoMean’s best by a clear margin on AIME, and at nearly identical masking fractions CARM still wins, suggesting the gain is not merely a filtering-rate effect. However, the paper does not explicitly compare against a GeoMean baseline tuned to match CARM’s out-of-band token statistics or severity, so the reader must infer that cancellation-awareness itself is the driver. The inclusion of TRM and IcePop provides useful anchors, yet the absence of a mean-absolute-deviation or KL-based sequence-level baseline means the comparison landscape remains incomplete. The bootstrapped best-of-k and worst-of-k analysis is a welcome addition showing improved sampling consistency beyond single-sample accuracy.

“CARM improves average pass@1 by 3.03 points over GeoMean and 2.88 points over the strongest evaluated baseline.”
Zhang et al. · Section 4.3
“On Qwen3.5-9B, CARM outperforms GeoMean by 3.47 points while their masked fractions differ by only 0.43 points.”
Zhang et al. · Section 5.1
Reproducibility

Experimental details are generally solid: hyperparameters are consolidated in Appendix D Table 3, the training framework is public (verl), and reported results use three random seeds. The paper also documents the PPO/GRPO clipping band $[0.8, 1.28]$ and the stored rollout log-probability protocol. However, the authors do not mention releasing code, checkpoints, or dataset preprocessing scripts, which is the main barrier to independent reproduction. Replicating the precise masking behavior also requires access to the micro-batch schedule and numerical guards, which are stated in Appendix B but would benefit from a reference implementation.

“Base models: Qwen3.5-4B and Qwen3.5-9B (math); Qwen3.5-9B (code). Framework / algorithm: verl; GRPO-style optimization. Learning rate: $3\times 10^{-6}$. PPO clipping band: $[1-0.2, 1+0.28] = [0.8, 1.28]$.”
Zhang et al. · Appendix D, Table 3
“The implementation uses verl's numerical guard $\widetilde{z}_{t}=\operatorname{clip}(\log r_{t},-20,20)$ when computing the mask and token surrogate.”
Zhang et al. · Appendix B
Abstract

Recent years have witnessed the rapid adoption of reinforcement learning (RL) in large language model (LLM) post-training, with substantial gains in mathematical reasoning and code generation. In practical systems, however, policy updates and differences between rollout and training engines can make sampled responses off-policy. Sequence-level masking addresses this mismatch by deciding whether an entire response should contribute to optimization. A common masking rule uses the length-normalized geometric mean of sampled token probability ratios. Its signed log-ratios can cancel across positions, concealing substantial bidirectional policy drift. We propose \emph{Cancellation-Aware Response Masking} (CARM), a sequence-level mask that takes the absolute value of each token log-ratio before averaging, preventing opposing probability changes from canceling. We prove that accepted responses satisfy a joint bound on the fraction of sampled-token ratios outside a prescribed band and their mean log-distance beyond its boundaries. Experiments on mathematical reasoning and code generation show that CARM improves mean@16 averaged over AIME 2024/2025/2026 and BeyondAIME by up to $3.13$ percentage points over geometric-mean masking, and increases average pass@1 across four code benchmarks by $2.88$ points over the strongest evaluated baseline. These findings support CARM as a theoretically grounded and effective method for response-level off-policy control in LLM reinforcement learning.

Challenge the Review

Pick a starting point or write your own. Challenges run in the background, so you can keep reading while the AI investigates.

No challenges yet. Disagree with the review? Ask the AI to revisit a specific claim.