mlsanityData to 7 Oct 2026

Current state of LLM Risks and AI Guardrails

arXiv 2406.12934 ↗First posted 16 Jun 2024cs.CR cs.AI cs.HCcited by 44

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Large language models (LLMs) have become increasingly sophisticated, leading to widespread deployment in sensitive applications where safety and reliability are paramount. However, LLMs have inherent risks accompanying them, including bias, potential for unsafe actions, dataset poisoning, lack of explainability, hallucinations, and non-reproducibility. These risks necessitate the development of "guardrails" to align LLMs with desired behaviors and mitigate potential harm. This work explores the risks associated with deploying LLMs and evaluates current approaches to implementing guardrails and model alignment techniques. We examine intrinsic and extrinsic bias evaluation methods and discuss the importance of fairness metrics for responsible AI development. The safety and reliability of agentic LLMs (those capable of real-world actions) are explored, emphasizing the need for testability, fail-safes, and situational awareness. Technical strategies for securing LLMs are presented, including a layered protection model operating at external, secondary, and internal levels. System prompts, Retrieval-Augmented Generation (RAG) architectures, and techniques to minimize bias and protect privacy are highlighted. Effective guardrail design requires a deep understanding of the LLM's intended use case, relevant regulations, and ethical considerations. Striking a balance between competing requirements, such as accuracy and privacy, remains an ongoing challenge. This work underscores the importance of continuous research and development to ensure the safe and responsible use of LLMs in real-world applications.

Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 24 of its 44 references that are in the map. First posted on arXiv 16 Jun 2024.

Builds on

24 of 44 references.

References · 24

  1. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
  2. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  3. 2022Rethinking the Role of Demonstrations: What Makes In-Context Learning Work?cited by 1,413
  4. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  5. 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
  6. 2018Gender Bias in Coreference Resolutioncited by 438
  7. 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
  8. 2023ToolQA: A Dataset for LLM Question Answering with External Toolscited by 273
  9. 2023Universal Self-Consistency for Large Language Model Generationcited by 198
  10. 2020Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuningcited by 152
  11. 2023Harms from Increasingly Agentic Algorithmic Systemscited by 134
  12. 2021DECAF: Generating Fair Synthetic Data Using Causally-Aware Generative Networkscited by 109
12 more
  1. 2024Systematic Biases in LLM Simulations of Debatescited by 98
  2. 2024MatPlotAgent: Method and Evaluation for LLM-Based Agentic Scientific Data Visualizationcited by 98
  3. 2024Unfamiliar Finetuning Examples Control How Language Models Hallucinatecited by 85
  4. 2024Reliable, Adaptable, and Attributable Language Models with Retrievalcited by 73
  5. 2023When "A Helpful Assistant" Is Not Really Helpful: Personas in System Prompts Do Not Improve Performances of Large Language Modelscited by 50
  6. 2022Prompt Injection: Parameterization of Fixed Inputscited by 35
  7. 2024FairRAG: Fair Human Generation via Fair Retrieval Augmentationcited by 34
  8. 2018Domain Adaptive Transfer Learning with Specialist Modelscited by 31
  9. 2024Knowledge Graphs as Context Sources for LLM-Based Explanations of Learning Recommendationscited by 31
  10. 2020A Simple Fine-tuning Is All You Need: Towards Robust Deep Learning Via Adversarial Fine-tuningcited by 30
  11. 2024In-context learning agents are asymmetric belief updaterscited by 13
  12. 2024StablePT: Towards Stable Prompting for Few-shot Learning via Input Separationcited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 10; 2025: 22; 2026: 12.

44 papers.

Sort:

By area:

  1. 2024Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Surveycited by 86
  2. 2024LLMs are Also Effective Embedding Models: An In-depth Overviewcited by 32
  3. 2025Agentic AI Security: Threats, Defenses, Evaluation, and Open Challengescited by 26
  4. 2025Octopus: Alleviating Hallucination via Dynamic Contrastive Decodingcited by 23
  5. 2026A Framework for Formalizing LLM Agent Securitycited by 16
  6. 2024Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAIcited by 14
  7. 2024Swiss Cheese Model for AI Safety: A Taxonomy and Reference Architecture for Multi-Layered Guardrails of Foundation Model Based Agentscited by 13
  8. 2025Agentic AI Systems Applied to tasks in Financial Services: Modeling and model risk management crewscited by 12
  9. 2025No Free Lunch with Guardrailscited by 10
  10. 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safetycited by 10
  11. 2024From Vulnerabilities to Remediation: A Systematic Literature Review of LLMs in Code Securitycited by 9
  12. 2025DualBreach: Efficient Dual-Jailbreaking via Target-Driven Initialization and Multi-Target Optimizationcited by 9
32 more
  1. 2025Language Models Can Predict Their Own Behaviorcited by 8
  2. 2024Building a Domain-specific Guardrail Model in Productioncited by 6
  3. 2025Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Iscited by 6
  4. 2025Accidental Vulnerability: Factors in Fine-Tuning that Shift Model Safeguardscited by 5
  5. 2025MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts?cited by 5
  6. 2025OpenRAG: Optimizing RAG End-to-End via In-Context Retrieval Learningcited by 4
  7. 2025Bridging Industrial Expertise and XR with LLM-Powered Conversational Agentscited by 4
  8. 2025Uncovering the Fragility of Trustworthy LLMs through Chinese Textual Ambiguitycited by 4
  9. 2025Pet-Bench: Benchmarking the Abilities of Large Language Models as E-Pets in Social Network Servicescited by 3
  10. 2025H2HTalk: Evaluating Large Language Models as Emotional Companioncited by 3
  11. 2026TopoPilot: Reliable Conversational Workflow Automation for Topological Data Analysis and Visualizationcited by 3
  12. 2024From Cool Demos to Production-Ready FMware: Core Challenges and a Technology Roadmapcited by 2
  13. 2024Libra-Leaderboard: Towards Responsible AI through a Balanced Leaderboard of Safety and Capabilitycited by 2
  14. 2025Scam2Prompt: A Scalable Framework for Auditing Malicious Scam Endpoints in Production LLMscited by 2
  15. 2026Bielik Guard: Efficient Polish Language Safety Classifiers for LLM Content Moderationcited by 2
  16. 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
  17. 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
  18. 2025A Criminology of Machinescited by 1
  19. 2025Prioritize Economy or Climate Action? Investigating ChatGPT Response Differences Based on Inferred Political Orientationcited by 1
  20. 2026To Defend Against Cyber Attacks, We Must Teach AI Agents to Hackcited by 1
  21. 2026The Curse of Helpfulness: Inverse Scaling Law in Robustness to Distractor Instructions via DistractionIFcited by 1
  22. 2024"Moralized" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attackscited by 0
  23. 2025The Hitchhikers Guide to Production-ready Trustworthy Foundation Model powered Software (FMware)cited by 0
  24. 2025AI-guided digital intervention with physiological monitoring reduces intrusive memories after experimental traumacited by 0
  25. 2025Do Androids Dream of Unseen Puppeteers? Probing for a Conspiracy Tendencies in Large Language Modelscited by 0
  26. 2026Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forwardcited by 0
  27. 2026Introducing the Generative Application Firewall (GAF)cited by 0
  28. 2026Counting Worlds Branching Time Semantics for post-hoc Bias Mitigation in generative AIcited by 0
  29. 2026U-Define: Designing User Workflows for Hard and Soft Constraints in LLM-Based Planningcited by 0
  30. 2026From Intent to AI Pipelines: A Controlled Agentic Framework for Non-AI Expert Scientistscited by 0
  31. 2026LLM-Driven Autonomous Vehicles Inherit Human Driver Biases in Pedestrian Yielding: Results and Implications From A New Benchmarkcited by 0
  32. 2026BRANCH: Bypassing Multi-Scanner AI Guardrailscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2024Large Language Model Safety: A Holistic Survey
  2. 2025LLM-Safety Evaluations Lack Robustness
  3. 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment
  4. 2024Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents
  5. 2024Unique Security and Privacy Threats of Large Language Models: A Comprehensive Survey
  6. 2025aiXamine: Simplified LLM Safety and Security
  7. 2026TraceSafe: A Systematic Assessment of LLM Guardrails on Multi-Step Tool-Calling Trajectories
  8. 2025Data Security in Large Language Models: Risks, Defense, and Directions