{"total":136,"rows":[{"id":"2501.03575","title":"Cosmos World Foundation Model Platform for Physical AI","created":"2025-01-07","cited_by_count":864,"area":"wm"},{"id":"2406.18495","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","created":"2024-06-26","cited_by_count":496,"area":"safety"},{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2406.11704","title":"Nemotron-4 340B Technical Report","created":"2024-06-17","cited_by_count":144,"area":null},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2411.10414","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","created":"2024-11-15","cited_by_count":129,"area":"mllm"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2501.18492","title":"GuardReasoner: Towards Reasoning-based LLM Safeguards","created":"2025-01-30","cited_by_count":100,"area":"lr"},{"id":"2504.17704","title":"Safety in Large Reasoning Models: A Survey","created":"2025-04-24","cited_by_count":64,"area":"lr"},{"id":"2504.04377","title":"PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages","created":"2025-04-06","cited_by_count":59,"area":null},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2507.21206","title":"Agentic Web: Weaving the Next Web with AI Agents","created":"2025-07-28","cited_by_count":45,"area":"agents"},{"id":"2407.05557","title":"$R^2$-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning","created":"2024-07-08","cited_by_count":43,"area":"lr"},{"id":"2505.11049","title":"GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning","created":"2025-05-16","cited_by_count":42,"area":"lr"},{"id":"2502.13458","title":"ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrails","created":"2025-02-19","cited_by_count":31,"area":"lr"},{"id":"2406.00936","title":"A Survey of Useful LLM Evaluation","created":"2024-06-03","cited_by_count":29,"area":null},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2502.11355","title":"Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agents","created":"2025-02-17","cited_by_count":27,"area":"lr"},{"id":"2508.01710","title":"CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications","created":"2025-08-03","cited_by_count":27,"area":"agents"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2410.14815","title":"Adapting Multilingual LLMs to Low-Resource Languages using Continued Pre-training and Synthetic Corpus","created":"2024-10-18","cited_by_count":24,"area":"synth"},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2603.06594","title":"A Coin Flip for Safety: LLM Judges Fail to Reliably Measure Adversarial Robustness","created":"2026-02-04","cited_by_count":20,"area":"safety"},{"id":"2410.01524","title":"HarmAug: Effective Data Augmentation for Knowledge Distillation of Safety Guard Models","created":"2024-10-02","cited_by_count":19,"area":"distill"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2601.15588","title":"YuFeng-XGuard: A Reasoning-Centric, Interpretable, and Flexible Guardrail Model for Large Language Models","created":"2026-01-22","cited_by_count":19,"area":"lr"},{"id":"2409.11844","title":"MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts","created":"2024-09-18","cited_by_count":18,"area":"safety"},{"id":"2410.22153","title":"Benchmarking LLM Guardrails in Handling Multilingual Toxicity","created":"2024-10-29","cited_by_count":14,"area":"safety"},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2504.08848","title":"X-Guard: Multilingual Guard Agent for Content Moderation","created":"2025-04-11","cited_by_count":13,"area":"agents"},{"id":"2504.15699","title":"Advancing Embodied Agent Security: From Safety Benchmarks to Input Moderation","created":"2025-04-22","cited_by_count":13,"area":"agents"},{"id":"2411.05214","title":"STAND-Guard: A Small Task-Adaptive Content Moderation Model","created":"2024-11-07","cited_by_count":12,"area":null},{"id":"2505.16947","title":"MixAT: Combining Continuous and Discrete Adversarial Training for LLMs","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2604.18519","title":"LLM Safety From Within: Detecting Harmful Content with Internal Representations","created":"2026-04-20","cited_by_count":11,"area":"safety"},{"id":"2408.11851","title":"SAGE-RT: Synthetic Alignment data Generation for Safety Evaluation and Red Teaming","created":"2024-08-14","cited_by_count":10,"area":"safety"},{"id":"2410.16665","title":"SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior","created":"2024-10-22","cited_by_count":10,"area":null},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2502.11411","title":"Detecting and Filtering Unsafe Training Data via Data Attribution with Denoised Representation","created":"2025-02-17","cited_by_count":9,"area":null},{"id":"2504.15241","title":"MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety","created":"2025-04-21","cited_by_count":9,"area":"lr"},{"id":"2505.17244","title":"ReasoningShield: Safety Detection over Reasoning Traces of Large Reasoning Models","created":"2025-05-22","cited_by_count":9,"area":"lr"},{"id":"2411.14398","title":"Lightweight Safety Guardrails Using Fine-tuned BERT Embeddings","created":"2024-11-21","cited_by_count":8,"area":"safety"},{"id":"2504.10277","title":"RealHarm: A Collection of Real-World Language Model Application Failures","created":"2025-04-14","cited_by_count":8,"area":null},{"id":"2405.19795","title":"SLM as Guardian: Pioneering AI Safety with Small Language Models","created":"2024-05-30","cited_by_count":7,"area":null},{"id":"2411.07122","title":"SCAR: Sparse Conditioned Autoencoders for Concept Detection and Steering in LLMs","created":"2024-11-11","cited_by_count":7,"area":"safety"},{"id":"2505.14035","title":"ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs","created":"2025-05-20","cited_by_count":7,"area":"lr"},{"id":"2506.00166","title":"Disentangled Safety Adapters Enable Efficient Guardrails and Flexible Inference-Time Alignment","created":"2025-05-30","cited_by_count":6,"area":"alignment"},{"id":"2511.04316","title":"AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research","created":"2025-11-06","cited_by_count":6,"area":"safety"},{"id":"2512.03994","title":"Training-Free Policy Violation Detection via Activation-Space Whitening in LLMs","created":"2025-12-03","cited_by_count":6,"area":null},{"id":"2606.22873","title":"SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoning","created":"2026-06-22","cited_by_count":6,"area":"lr"},{"id":"2412.13435","title":"Lightweight Safety Classification Using Pruned Language Models","created":"2024-12-18","cited_by_count":5,"area":"safety"},{"id":"2502.01241","title":"Peering Behind the Shield: Guardrail Identification in Large Language Models","created":"2025-02-03","cited_by_count":5,"area":"safety"},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2507.09424","title":"DATE-LM: Benchmarking Data Attribution Evaluation for Large Language Models","created":"2025-07-12","cited_by_count":5,"area":null},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2511.22047","title":"Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks","created":"2025-11-27","cited_by_count":5,"area":"safety"},{"id":"2604.08608","title":"Semantic Intent Fragmentation: A Single-Shot Compositional Attack on Multi-Agent AI Pipelines","created":"2026-04-08","cited_by_count":5,"area":"agents"},{"id":"2502.16174","title":"Efficient LLM Moderation with Multi-Layer Latent Prototypes","created":"2025-02-22","cited_by_count":4,"area":"safety"},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2506.07330","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","created":"2025-06-09","cited_by_count":4,"area":null},{"id":"2508.20151","title":"IntentionReasoner: Facilitating Adaptive LLM Safeguards through Intent Reasoning and Selective Query Refinement","created":"2025-08-27","cited_by_count":4,"area":"lr"},{"id":"2512.23573","title":"ProGuard: Towards Proactive Multimodal Safeguard","created":"2025-12-29","cited_by_count":4,"area":null},{"id":"2603.02219","title":"NExT-Guard: Training-Free Streaming Safeguard without Token-Level Labels","created":"2026-02-10","cited_by_count":4,"area":"mechinterp"},{"id":"2410.08442","title":"JurEE not Judges: safeguarding llm interactions with small, specialised Encoder Ensembles","created":"2024-10-11","cited_by_count":3,"area":null},{"id":"2504.19333","title":"Unified Multi-Task Learning & Model Fusion for Efficient Language Model Guardrailing","created":"2025-04-27","cited_by_count":3,"area":"safety"},{"id":"2505.13581","title":"RAR: Setting Knowledge Tripwires for Retrieval Augmented Rejection","created":"2025-05-19","cited_by_count":3,"area":"rag"},{"id":"2509.25539","title":"Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directions","created":"2025-09-29","cited_by_count":3,"area":null},{"id":"2510.05310","title":"RAG Makes Guardrails Unsafe? Investigating Robustness of Guardrails under RAG-style Contexts","created":"2025-10-06","cited_by_count":3,"area":"safety"},{"id":"2510.18081","title":"Any-Depth Alignment: Unlocking Innate Safety Alignment of LLMs to Any-Depth","created":"2025-10-20","cited_by_count":3,"area":"alignment"},{"id":"2510.21049","title":"Reasoning's Razor: Reasoning Improves Accuracy but Can Hurt Recall at Critical Operating Points in Safety and Hallucination Detection","created":"2025-10-23","cited_by_count":3,"area":"lr"},{"id":"2604.03962","title":"Predict, Don't React: Value-Based Safety Forecasting for LLM Streaming","created":"2026-04-05","cited_by_count":3,"area":"safety"},{"id":"2604.08867","title":"AudioGuard: Toward Comprehensive Audio Safety Protection Across Diverse Threat Models","created":"2026-04-10","cited_by_count":3,"area":"safety"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2506.16322","title":"PL-Guard: Benchmarking Language Model Safety for Polish","created":"2025-06-19","cited_by_count":2,"area":null},{"id":"2507.02986","title":"GAF-Guard: An Agentic Framework for Risk Management and Governance in Large Language Models","created":"2025-07-01","cited_by_count":2,"area":"agents"},{"id":"2507.21929","title":"Libra: Large Chinese-based Safeguard for AI Content","created":"2025-07-29","cited_by_count":2,"area":null},{"id":"2510.13982","title":"Static Sandboxes Are Inadequate: Modeling Societal Complexity Requires Open-Ended Co-Evolution in LLM-Based Multi-Agent Simulations","created":"2025-10-15","cited_by_count":2,"area":"agents"},{"id":"2512.05339","title":"Taxonomy-Adaptive Moderation Model with Robust Guardrails for Large Language Models","created":"2025-12-05","cited_by_count":2,"area":"safety"},{"id":"2512.19011","title":"Do You Really Need a GPU to Guard Your LLM? CPU-Class Classifiers and Multi-Stage Pipelines for Safety Enforcement at Scale","created":"2025-12-22","cited_by_count":2,"area":"safety"},{"id":"2512.20293","title":"AprielGuard","created":"2025-12-23","cited_by_count":2,"area":"agents"},{"id":"2603.02588","title":"ExpGuard: LLM Content Moderation in Specialized Domains","created":"2026-03-03","cited_by_count":2,"area":"safety"},{"id":"2606.08044","title":"When Behavioral Safety Evaluation Fails: A Representation-Level Perspective","created":"2026-06-06","cited_by_count":2,"area":"safety"},{"id":"2608.27147","title":"Thomson: Continual Learning of Frontier Models for SovereignAI","created":"2026-08-27","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2505.22184","title":"Breaking the Cloak! Unveiling Chinese Cloaked Toxicity with Homophone Graph and Toxic Lexicon","created":"2025-05-28","cited_by_count":1,"area":null},{"id":"2602.15853","title":"A Lightweight Explainable Guardrail for Prompt Safety","created":"2026-01-24","cited_by_count":1,"area":"safety"},{"id":"2604.03242","title":"DRAFT: Task Decoupled Latent Reasoning for Agent Safety","created":"2026-02-11","cited_by_count":1,"area":"lr"},{"id":"2604.07655","title":"Guardian-as-an-Advisor: Advancing Next-Generation Guardian Models for Trustworthy LLMs","created":"2026-04-08","cited_by_count":1,"area":null},{"id":"2604.17053","title":"Jailbreaking Large Language Models with Morality Attacks","created":"2026-04-18","cited_by_count":1,"area":"safety"},{"id":"2605.15598","title":"Compositional Jailbreaking: An Empirical Analysis of Mutator Chain Interactions in Aligned LLMs","created":"2026-05-15","cited_by_count":1,"area":"safety"},{"id":"2605.29068","title":"Robust and Efficient Guardrails with Latent Reasoning","created":"2026-05-27","cited_by_count":1,"area":"lr"},{"id":"2605.31073","title":"ConsisGuard: Aligning Safety Deliberation with Policy Enforcement in LLM Guardrails","created":"2026-05-29","cited_by_count":1,"area":"lr"},{"id":"2606.00611","title":"TRACE: Trajectory Risk-Aware Compression for Long-Horizon Agent Safety","created":"2026-05-30","cited_by_count":1,"area":"agents"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2606.26686","title":"Do Safety Guardrails Need to Reason? LeanGuard: A Fast and Light Approach for Robust Moderation","created":"2026-06-25","cited_by_count":1,"area":"lr"},{"id":"2606.29887","title":"SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailing","created":"2026-06-29","cited_by_count":1,"area":"safety"},{"id":"2607.17575","title":"A Dual-Hypothesis Reasoning Framework for LLM Guardrails","created":"2026-07-20","cited_by_count":1,"area":"lr"},{"id":"2607.21401","title":"When Are Reasoning-Based Guardrails Not Efficient? ResponseGuard: A Fast Vision-Language Guard for Real-Time Moderation","created":"2026-07-23","cited_by_count":1,"area":"lr"}],"next_cursor":"100"}