# Iris Safety Evaluations

Reflection released Beam, its first open-weight model, together with the safety training methods and evaluation tools behind it. Public safety evaluations had not covered enough ground to test whether safety boundaries hold in adversarial and tool-use settings. Beam combines pretraining data filtering with dedicated safety alignment training, merging a capability teacher and a safety teacher through multi-teacher on-policy distillation. On 1,500 human-written conversations in the Iris safety evaluations, Beam declined 89% of harmful requests and complied with 82% of safety-related harmless requests.

Reflection released Beam, its first open-weight model, together with the safety training methods and evaluation tools behind it. Public safety evaluations had not covered enough ground to test whether safety boundaries hold in adversarial and tool-use settings. Beam combines pretraining data filtering with dedicated safety alignment training, merging a capability teacher and a safety teacher through multi-teacher on-policy distillation. On 1,500 human-written conversations in the Iris safety evaluations, Beam declined 89% of harmful requests and complied with 82% of safety-related harmless requests.