Supervised fine-tuning (SFT) with token-level hard labels can amplify overconfident imitation of factually unsupported targets, causing hallucinations that propagate in multi-sentence generation. We study an augmented SFT setting in which training instances include coarse sentence-level factuality risk labels and inter-sentence dependency annotations, providing structured signals about where factual commitments are weakly supported. We propose PRISM, a differentiable risk-gated framework that modifies learning only at fact-critical positions. PRISM augments standard SFT with a lightweight, model-aware probability reallocation objective that penalizes high-confidence predictions on risky target tokens, with its scope controlled by span-level risk weights and model-aware gating. Experiments on hallucination-sensitive factual benchmarks and general evaluations show that PRISM improves factual aggregates across backbones while maintaining a competitive overall capability profile. Ablations further show that the auxiliary signal is most effective when used conservatively, and that knowledge masking and model-aware reallocation play complementary roles in balancing factual correction and capability preservation.
Figures & tables
Figure 1: Averaged factual and common performance under different auxiliary weights λ , shown as Δ relative to the SFT baseline. The figure illustrates a trade-off between factual improvement and preservation of general capability.
Figure 2: Overall pipeline of our risk-gated knowledge-aware SFT (PRISM). Starting from instruction–response pairs, we extract atomic facts and fact relations, derive token-level fact spans and risk weights, and inject these signals into SFT via a model-aware, risk-gated probability reallocation objective.
Model
Size
Method
Factual
Common
HHEM ↑
PopQA ↑
TriviaQA ↑
Avg ↑
MMLU ↑
GSM8K ↑
HumanEval ↑
IFEval ↑
Avg ↑
Qwen3
4B
SFT
94.53
58.54
68.95
74.01
76.19
85.14
79.27
60.81
75.35
SEAL
92.25
57.76
68.87
72.96
76.01
87.64
79.88
60.81
76.09
NOVA
94.83
58.89
69.34
74.35
75.28
81.58
81.71
57.86
74.11
PRISM
95.03
59.54
68.90
74.49
76.93
86.20
81.71
63.40
77.06
Qwen3
8B
SFT
94.83
54.90
69.22
72.98
78.21
88.02
83.54
45.66
73.86
Table 1: Main results. Factual Avg is the mean of (HHEM, PopQA, TriviaQA); Common Avg is the mean of (MMLU, GSM8K, HumanEval, IFEval). Best and second-best averages within each backbone are bold and underlined , respectively.
Variant
Factual
Common
HHEM ↑
PopQA ↑
TriviaQA ↑
Avg. ↑
MMLU ↑
GSM8K ↑
HumanEval ↑
IFEval ↑
Avg. ↑
SFT ( λ=0 )
94.53
58.54
68.95
74.01
76.19
85.14
79.27
60.81
75.35
λ=0.01
92.64
59.76
68.55
73.65
75.11
85.44
82.93
53.42
74.23
λ=0.1
95.03
59.54
68.90
74.49
76.93
86.20
81.71
63.40
77.06
λ=0.5
94.54
58.83
68.06
73.81
74.86
86.81
79.88
51.76
73.33
λ=1.0
94.54
60.33
67.44
74.10
73.12
86.05
81.71
54.53
73.85
Table 2: Effect of the auxiliary weight λ on Qwen3-4B. The averaged results suggest a trade-off between factual correction and general capability preservation as the auxiliary signal becomes stronger.
Variant
Factual
Common
HHEM ↑
PopQA ↑
TriviaQA ↑
Avg. ↑
MMLU ↑
GSM8K ↑
HumanEval ↑
IFEval ↑
Avg. ↑
Ours
95.03
59.54
68.90
74.49
76.93
86.20
81.71
63.40
77.06
w/o model-aware reallocation
94.83
58.54
68.14
73.84
75.54
85.22
77.44
61.74
74.99
w/o knowledge mask
94.04
59.97
68.97
74.33
74.68
84.38
80.49
52.31
72.97
Table 3: Component analysis on Qwen3-4B. “Ours” uses both model-aware reallocation and knowledge masking. “w/o model-aware reallocation” keeps factual masking but removes preference-conditioned reallocation, while “w/o knowledge mask” keeps model-aware updates without masking. The combined design yields the best overall common average while remaining competitive on factual benchmarks.
MIIT Key Laboratory of Pattern Analysis and Machine Intelligence, College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics