Building a Domain-specific Guardrail Model in Production
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Generative AI holds the promise of enabling a range of sought-after capabilities and revolutionizing workflows in various consumer and enterprise verticals. However, putting a model in production involves much more than just generating an output. It involves ensuring the model is reliable, safe, performant and also adheres to the policy of operation in a particular domain. Guardrails as a necessity for models has evolved around the need to enforce appropriate behavior of models, especially when they are in production. In this paper, we use education as a use case, given its stringent requirements of the appropriateness of content in the domain, to demonstrate how a guardrail model can be trained and deployed in production. Specifically, we describe our experience in building a production-grade guardrail model for a K-12 educational platform. We begin by formulating the requirements for deployment to this sensitive domain. We then describe the training and benchmarking of our domain-specific guardrail model, which outperforms competing open- and closed- instruction-tuned models of similar and larger size, on proprietary education-related benchmarks and public benchmarks related to general aspects of safety. Finally, we detail the choices we made on architecture and the optimizations for deploying this service in production; these range across the stack from the hardware infrastructure to the serving layer to language model inference optimizations. We hope this paper will be instructive to other practitioners looking to create production-grade domain-specific services based on generative AI and large language models.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 23 of its 41 references that are in the map. First posted on arXiv 24 Jul 2024.
Builds on
23 of 41 references.
Closest ancestors · 4
Same direction, newest first
- 2024Guardrails for avoiding harmful medical product recommendations and off-label promotion in generative AI models24 Jun
- 2024Current state of LLM Risks and AI Guardrails16 Jun
- 2024Building Guardrails for Large Language Models2 Feb
- 2024The Ethics of Interaction: Mitigating Security Threats in LLMs22 Jan
Other references · 19
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
- 2019Nuanced Metrics for Measuring Unintended Bias with Real Data for Text Classificationcited by 396
- 2016Ex Machina: Personal Attacks Seen at Scalecited by 208
- 2023GPTs are GPTs: An Early Look at the Labor Market Impact Potential of Large Language Modelscited by 174
- 2020Recipes for Safety in Open-domain Chatbotscited by 168
- 2020Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claimscited by 163
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 91
- 2018Privacy Preserving Machine Learning: Threats and Solutionscited by 78
- 2020Consistency Regularization for Certified Robustness of Smoothed Classifierscited by 73
- 2021On the Safety of Conversational Models: Taxonomy, Dataset, and Benchmarkcited by 73
- 2021Measuring Conversational Uptake: A Case Study on Student-Teacher Interactionscited by 44
- 2024Exploring the Capabilities and Limitations of Large Language Models in the Electric Energy Sectorcited by 29
7 more
- 2023How Useful are Educational Questions Generated by Large Language Models?cited by 23
- 2023Certified Robustness for Large Language Models with Self-Denoisingcited by 23
- 2023Scalable Educational Question Generation with Pre-trained Language Modelscited by 19
- 2023Towards Safer Generative Language Models: A Survey on Safety Risks, Evaluations, and Improvementscited by 14
- 2024GUARD-D-LLM: An LLM-Based Risk Assessment Engine for the Downstream uses of LLMscited by 2
- 2023ChatGPT-3.5, ChatGPT-4, Google Bard, and Microsoft Bing to Improve Health Literacy and Communication in Pediatric Populations and Beyondcited by 1
- 2023Empowering ChatGPT-Like Large-Scale Language Models with Local Knowledge Base for Industrial Prognostics and Health Managementcited by 1
Built on by
Citing papers per year: 2024: 3; 2025: 2; 2026: 1.
6 papers.
- 2024SciSafeEval: A Comprehensive Benchmark for Safety Alignment of Large Language Models in Scientific Taskscited by 17
- 2025PROMPTEVALS: A Dataset of Assertions and Guardrails for Custom Production Large Language Model Pipelinescited by 5
- 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrailscited by 4
- 2025A Framework for Situating Innovations, Opportunities, and Challenges in Advancing Vertical Systems with Large AI Modelscited by 2
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
- 2024A Grounded Observer Framework for Establishing Guardrails for Foundation Models in Socially Sensitive Domainscited by 1
- 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrails17 May 2026
- 2025PROMPTEVALS: A Dataset of Assertions and Guardrails for Custom Production Large Language Model Pipelines20 Apr 2025
- 2025A Framework for Situating Innovations, Opportunities, and Challenges in Advancing Vertical Systems with Large AI Models3 Apr 2025
- 2024A Grounded Observer Framework for Establishing Guardrails for Foundation Models in Socially Sensitive Domains23 Dec 2024
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond9 Oct 2024
- 2024SciSafeEval: A Comprehensive Benchmark for Safety Alignment of Large Language Models in Scientific Tasks2 Oct 2024