Enhancing Guardrails for Safe and Secure Healthcare AI
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Generative AI holds immense promise in addressing global healthcare access challenges, with numerous innovative applications now ready for use across various healthcare domains. However, a significant barrier to the widespread adoption of these domain-specific AI solutions is the lack of robust safety mechanisms to effectively manage issues such as hallucination, misinformation, and ensuring truthfulness. Left unchecked, these risks can compromise patient safety and erode trust in healthcare AI systems. While general-purpose frameworks like Llama Guard are useful for filtering toxicity and harmful content, they do not fully address the stringent requirements for truthfulness and safety in healthcare contexts. This paper examines the unique safety and security challenges inherent to healthcare AI, particularly the risk of hallucinations, the spread of misinformation, and the need for factual accuracy in clinical settings. I propose enhancements to existing guardrails frameworks, such as Nvidia NeMo Guardrails, to better suit healthcare-specific needs. By strengthening these safeguards, I aim to ensure the secure, reliable, and accurate use of AI in healthcare, mitigating misinformation risks and improving patient safety.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 9 of its 17 references that are in the map. First posted on arXiv 25 Sep 2024.
Builds on
9 of 17 references.
References · 9
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 489
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 231
- 2023Sources of Hallucination by Large Language Models on Inference Taskscited by 169
- 2023Med-HALT: Medical Domain Hallucination Test for Large Language Modelscited by 157
- 2024KNOWNET: Guided Health Information Seeking from LLMs via Knowledge Graph Integrationcited by 15
- 2024Introducing L2M3, A Multilingual Medical Large Language Model to Advance Health Equity in Low-Resource Regionscited by 5
Built on by
Citing papers per year: 2025: 4; 2026: 3.
7 papers.
- 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthinesscited by 7
- 2025Constrained Sliced Wasserstein Embeddingcited by 2
- 2026Trust but Verify: Mitigating Medical Hallucinations via Post-Hoc Adversarial Auditing and Multi-Agent Feedback Loopscited by 1
- 2025Taxonomy of Comprehensive Safety for Clinical Agentscited by 0
- 2025Beyond the Benchmark: Innovative Defenses Against Prompt Injection Attackscited by 0
- 2026Boundary-targeted Membership Inference Attacks on Safety Classifierscited by 0
- 2026When Medical Safety Alignment Fails: A Benchmark for Evaluating LLMs on High-Risk Medical Queriescited by 0
- 2026Trust but Verify: Mitigating Medical Hallucinations via Post-Hoc Adversarial Auditing and Multi-Agent Feedback Loops12 Jun 2026
- 2026When Medical Safety Alignment Fails: A Benchmark for Evaluating LLMs on High-Risk Medical Queries26 May 2026
- 2026Boundary-targeted Membership Inference Attacks on Safety Classifiers21 May 2026
- 2025Beyond the Benchmark: Innovative Defenses Against Prompt Injection Attacks18 Dec 2025
- 2025A Survey on Collaborating Small and Large Language Models for Performance, Cost-effectiveness, Cloud-edge Privacy, and Trustworthiness14 Oct 2025
- 2025Taxonomy of Comprehensive Safety for Clinical Agents26 Sep 2025
- 2025Constrained Sliced Wasserstein Embedding2 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2026CareGuardAI: Context-Aware Multi-Agent Guardrails for Clinical Safety & Hallucination Mitigation in Patient-Facing LLMs
- 2024Ensuring Safety and Trust: Analyzing the Risks of Large Language Models in Medicine
- 2024The Need for Guardrails with Large Language Models in Medical Safety-Critical Settings: An Artificial Intelligence Application in the Pharmacovigilance Ecosystem
- 2026MindGuard: Guardrail Classifiers for Multi-Turn Mental Health Support
- 2025Medical Malice: A Dataset for Context-Aware Safety in Healthcare LLMs
- 2025A Practical Framework for Evaluating Medical AI Security: Reproducible Assessment of Jailbreaking and Privacy Vulnerabilities Across Clinical Specialties
- 2025Towards Safe AI Clinicians: A Comprehensive Study on Large Language Model Jailbreaking in Healthcare
- 2025A Systematic Analysis of Declining Medical Safety Messaging in Generative AI Models