{"total":49,"rows":[{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2509.02563","title":"DynaGuard: A Dynamic Guardian Model With User-Defined Policies","created":"2025-09-02","cited_by_count":19,"area":"safety"},{"id":"2604.18519","title":"LLM Safety From Within: Detecting Harmful Content with Internal Representations","created":"2026-04-20","cited_by_count":11,"area":"safety"},{"id":"2510.09694","title":"Kelp: A Streaming Safeguard for Large Models via Latent Dynamics-Guided Risk Detection","created":"2025-10-09","cited_by_count":9,"area":"safety"},{"id":"2505.23856","title":"OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2605.07982","title":"GLiGuard: Schema-Conditioned Classification for LLM Safeguard","created":"2026-05-08","cited_by_count":4,"area":"safety"},{"id":"2511.12497","title":"SGuard-v1: Safety Guardrail for Large Language Models","created":"2025-11-16","cited_by_count":3,"area":"safety"},{"id":"2602.13547","title":"AISA: Awakening Intrinsic Safety Awareness in Large Language Models against Jailbreak Attacks","created":"2026-02-14","cited_by_count":3,"area":"safety"},{"id":"2604.03962","title":"Predict, Don't React: Value-Based Safety Forecasting for LLM Streaming","created":"2026-04-05","cited_by_count":3,"area":"safety"},{"id":"2604.08867","title":"AudioGuard: Toward Comprehensive Audio Safety Protection Across Diverse Threat Models","created":"2026-04-10","cited_by_count":3,"area":"safety"},{"id":"2504.09712","title":"The Structural Safety Generalization Problem","created":"2025-04-13","cited_by_count":2,"area":"safety"},{"id":"2505.19766","title":"PAM: Training Policy-Aligned Moderation Filters at Scale","created":"2025-05-26","cited_by_count":2,"area":"safety"},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2509.16861","title":"AdaptiveGuard: Towards Adaptive Runtime Safety for LLM-Powered Software","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2512.02711","title":"CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer","created":"2025-12-02","cited_by_count":2,"area":"safety"},{"id":"2512.05339","title":"Taxonomy-Adaptive Moderation Model with Robust Guardrails for Large Language Models","created":"2025-12-05","cited_by_count":2,"area":"safety"},{"id":"2602.03328","title":"GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audio","created":"2026-02-03","cited_by_count":2,"area":"safety"},{"id":"2603.02588","title":"ExpGuard: LLM Content Moderation in Specialized Domains","created":"2026-03-03","cited_by_count":2,"area":"safety"},{"id":"2605.05277","title":"GLiNER Guard: Unified Encoder Family for Production LLM Safety and Privacy","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2608.08029","title":"Do All LLMs Know When They're Being Harmful? A Reproducibility Study of Latent-Space Safety Probes Across Model Families","created":"2026-08-08","cited_by_count":2,"area":"safety"},{"id":"2602.02509","title":"CodeGuard: Improving LLM Guardrails in CS Education","created":"2026-01-22","cited_by_count":1,"area":"safety"},{"id":"2602.15853","title":"A Lightweight Explainable Guardrail for Prompt Safety","created":"2026-01-24","cited_by_count":1,"area":"safety"},{"id":"2604.16542","title":"TWGuard: A Case Study of LLM Safety Guardrails for Localized Linguistic Contexts","created":"2026-04-17","cited_by_count":1,"area":"safety"},{"id":"2605.30693","title":"Triaging Threats to Specialized Guardrails","created":"2026-05-29","cited_by_count":1,"area":"safety"},{"id":"2606.20668","title":"BELLS-O: Evaluating the Operational Trade-offs of LLM Supervision Systems","created":"2026-06-12","cited_by_count":1,"area":"safety"},{"id":"2608.03201","title":"When Refusal Looks Safe: The Refusal-Cue Shortcut in Safety Guard Models","created":"2026-08-04","cited_by_count":1,"area":"safety"},{"id":"2608.11146","title":"The Illusion of Cross-Lingual Safety in Low-Resource Languages","created":"2026-08-11","cited_by_count":1,"area":"safety"},{"id":"2609.19472","title":"Safety Beyond the Interface: Detecting Harm via Latent States in Large Language Models","created":"2026-09-16","cited_by_count":1,"area":"safety"},{"id":"2508.02312","title":"Data Security in Large Language Models: Risks, Defense, and Directions","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2509.23381","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","created":"2025-09-27","cited_by_count":0,"area":"safety"},{"id":"2512.05501","title":"SEA-SafeguardBench: Evaluating AI Safety in SEA Languages and Cultures","created":"2025-12-05","cited_by_count":0,"area":"safety"},{"id":"2602.02536","title":"From Sparse Decisions to Dense Reasoning: A Multi-attribute Trajectory Paradigm for Multimodal Moderation","created":"2026-01-28","cited_by_count":0,"area":"safety"},{"id":"2604.23067","title":"Training a General Purpose Automated Red Teaming Model","created":"2026-04-24","cited_by_count":0,"area":"safety"},{"id":"2604.25203","title":"BARRED: Synthetic Training of Custom Policy Guardrails via Asymmetric Debate","created":"2026-04-28","cited_by_count":0,"area":"safety"},{"id":"2605.10901","title":"Beyond Red-Teaming: Formal Guarantees of LLM Guardrail Classifiers","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.21674","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","created":"2026-05-20","cited_by_count":0,"area":"safety"},{"id":"2605.29659","title":"Opir: Efficient Multi-Task Safety Classification for Toxicity, Jailbreaks, Hate Speech, and Harmful Content","created":"2026-05-28","cited_by_count":0,"area":"safety"},{"id":"2606.22841","title":"IndicGuard: A Multilingual Safety Guard Model and Dataset for Indic Languages","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2606.26377","title":"Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats","created":"2026-06-24","cited_by_count":0,"area":"safety"},{"id":"2606.31748","title":"Addressing Over-Refusal in LLMs with Competing Rewards","created":"2026-06-30","cited_by_count":0,"area":"safety"},{"id":"2607.02072","title":"kNNGuard: Turning LLM Hidden Activations into a Training-Free Configurable Guardrail","created":"2026-07-02","cited_by_count":0,"area":"safety"},{"id":"2608.27580","title":"LongGuard: Mechanistic Analysis and Training-Free Mitigation of Long-Context Failure in Safety Guardrails","created":"2026-08-27","cited_by_count":0,"area":"safety"},{"id":"2608.30703","title":"SingProbe Technical Report","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2609.01046","title":"HiveTraceGuard-Pro: A Compact Generative Guardrail for Prompt Injection, Jailbreaks, and Adversarial Obfuscation","created":"2026-09-01","cited_by_count":0,"area":"safety"},{"id":"2609.05797","title":"Safety Monitors Mostly Catch What the Model Already Refuses","created":"2026-09-05","cited_by_count":0,"area":"safety"},{"id":"2609.08256","title":"ACEA: An Adversarial Co-Evolution Arena for Head-to-Head Red-Team and Blue-Team LLM Testing","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2609.13737","title":"ForeSight: Enhancing Risk Monitoring via Early Safety Signal Distillation","created":"2026-09-12","cited_by_count":0,"area":"safety"},{"id":"2610.19118","title":"DecisionRobust: Benchmarking Robustness for JEV Style Decision Models Across Text and Vision","created":"2026-10-13","cited_by_count":0,"area":"safety"}],"next_cursor":null}