CONSCENDI: A Contrastive and Scenario-Guided Distillation Approach to Guardrail Models for Virtual Assistants
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
A wave of new task-based virtual assistants has been fueled by increasingly powerful large language models (LLMs), such as GPT-4 (OpenAI, 2023). A major challenge in deploying LLM-based virtual conversational assistants in real world settings is ensuring they operate within what is admissible for the task. To overcome this challenge, the designers of these virtual assistants rely on an independent guardrail system that verifies the virtual assistant's output aligns with the constraints required for the task. However, relying on commonly used, prompt-based guardrails can be difficult to engineer correctly and comprehensively. To address these challenges, we propose CONSCENDI. We use CONSCENDI to exhaustively generate training data with two key LLM-powered components: scenario-augmented generation and contrastive training examples. When generating conversational data, we generate a set of rule-breaking scenarios, which enumerate a diverse set of high-level ways a rule can be violated. This scenario-guided approach produces a diverse training set and provides chatbot designers greater control. To generate contrastive examples, we prompt the LLM to alter conversations with violations into acceptable conversations to enable fine-grained distinctions. We then use this data, generated by CONSCENDI, to train a smaller model. We find that CONSCENDI results in guardrail models that improve over baselines in multiple dialogue domains.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 21 of its 44 references that are in the map. First posted on arXiv 27 Apr 2023.
Builds on
21 of 44 references.
References · 21
- 2017Attention Is All You Needcited by 60,361
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,795
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
- 2021What Makes Good In-Context Examples for GPT-3?cited by 1,195
- 2015A Diversity-Promoting Objective Function for Neural Conversation Modelscited by 1,077
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 531
9 more
- 2019Towards Scalable Multi-domain Conversational Agents: The Schema-Guided Dialogue Datasetcited by 434
- 2020Debiased Contrastive Learningcited by 356
- 2022Large Language Models Are Reasoning Teacherscited by 329
- 2022Teaching Small Language Models to Reasoncited by 284
- 2021Process for Adapting Language Models to Society (PALMS) with Values-Targeted Datasetscited by 181
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2023DERA: Enhancing Large Language Model Completions with Dialog-Enabled Resolving Agentscited by 52
- 2022Training Language Models with Language Feedbackcited by 49
- 2022Bootstrapping a User-Centered Task-Oriented Dialogue Systemcited by 4
Built on by
Citing papers per year: 2023: 1; 2024: 1; 2025: 0; 2026: 3.
5 papers.
- 2024CantTalkAboutThis: Aligning Language Models to Stay on Topic in Dialoguescited by 15
- 2023Does fine-tuning GPT-3 with the OpenAI API leak personally-identifiable information?cited by 10
- 2026A Concise Agent is Less Expert: Revealing Side Effects of Using Style Features on Conversational Agentscited by 1
- 2026CorporateBench: Large-Scale Q&A Benchmarking with Temporal Knowledge Basescited by 1
- 2026Training a General Purpose Automated Red Teaming Modelcited by 0
- 2026CorporateBench: Large-Scale Q&A Benchmarking with Temporal Knowledge Bases27 Aug 2026
- 2026Training a General Purpose Automated Red Teaming Model24 Apr 2026
- 2026A Concise Agent is Less Expert: Revealing Side Effects of Using Style Features on Conversational Agents15 Jan 2026
- 2024CantTalkAboutThis: Aligning Language Models to Stay on Topic in Dialogues4 Apr 2024
- 2023Does fine-tuning GPT-3 with the OpenAI API leak personally-identifiable information?31 Jul 2023
Similar, not cited
Close in wording, no citation either way
- 2026Lattice: Generative Guardrails for Conversational Agents
- 2024Plan-Grounded Large Language Models for Dual Goal Conversational Settings
- 2026Stateful Guardrails for Multi-Turn LLM Systems: A Conversational Risk Accumulation Framework
- 2026TWGuard: A Case Study of LLM Safety Guardrails for Localized Linguistic Contexts
- 2025Peering Behind the Shield: Guardrail Identification in Large Language Models
- 2024Building Guardrails for Large Language Models
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoning
- 2025Protect: Towards Robust Guardrailing Stack for Trustworthy Enterprise LLM Systems