Unified Multi-Task Learning & Model Fusion for Efficient Language Model Guardrailing
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
The trend towards large language models (LLMs) for guardrailing against undesired behaviors is increasing and has shown promise for censoring user inputs. However, increased latency, memory consumption, hosting expenses and non-structured outputs can make their use prohibitive. In this work, we show that task-specific data generation can lead to fine-tuned classifiers that significantly outperform current state of the art (SoTA) while being orders of magnitude smaller. Secondly, we show that using a single model, textttMultiTaskGuard, that is pretrained on a large synthetically generated dataset with unique task instructions further improves generalization. Thirdly, our most performant models, textttUniGuard, are found using our proposed search-based model merging approach that finds an optimal set of parameters to combine single-policy models and multi-policy guardrail models. % On 7 public datasets and 4 guardrail benchmarks we created, our efficient guardrail classifiers improve over the best performing SoTA publicly available LLMs and 3rd party guardrail APIs in detecting unsafe and safe behaviors by an average F1 score improvement of 29.92 points over Aegis-LlamaGuard and 21.62 over textttgpt-4o, respectively. Lastly, our guardrail synthetic data generation process that uses custom task-specific guardrail poli
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 28 of its 34 references that are in the map. First posted on arXiv 27 Apr 2025.
Builds on
28 of 34 references.
Closest ancestors · 3
Same direction, newest first
- 2024PrimeGuard: Safe and Helpful LLMs through Tuning-Free Routing23 Jul
- 2024On Prompt-Driven Safeguarding for Large Language Models31 Jan
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
Other references · 25
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,396
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023TIES-Merging: Resolving Interference When Merging Modelscited by 818
- 2023Language Models are Super Mario: Absorbing Abilities from Homologous Models as a Free Lunchcited by 694
- 2021Merging Models with Fisher-Weighted Averagingcited by 621
- 2019Introduction to Multi-Armed Banditscited by 481
- 2022Dataless Knowledge Fusion by Merging Weights of Language Modelscited by 387
13 more
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2024Multilingual E5 Text Embeddings: A Technical Reportcited by 372
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 231
- 2020Learning from the Worst: Dynamically Generated Datasets to Improve Online Hate Detectioncited by 221
- 2024Evolutionary Optimization of Model Merging Recipescited by 208
- 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 185
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
- 2023Model Breadcrumbs: Scaling Multi-Task Model Merging with Sparse Maskscited by 133
- 2023Mechanistically analyzing the effects of fine-tuning on procedurally defined taskscited by 115
- 2022COLD: A Benchmark for Chinese Offensive Language Detectioncited by 76
- 2023LM-Cocktail: Resilient Tuning of Language Models via Model Mergingcited by 44
Built on by
Citing papers per year: 2025: 2; 2026: 1.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT
- 2024Building Guardrails for Large Language Models
- 2025OpenGuardrails: A Configurable, Unified, and Scalable Guardrails Platform for Large Language Models
- 2024A Flexible Large Language Models Guardrail Development Methodology Applied to Off-Topic Prompt Detection
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety
- 2026BARRED: Synthetic Training of Custom Policy Guardrails via Asymmetric Debate
- 2026Safety Beyond the Interface: Detecting Harm via Latent States in Large Language Models
- 2026kNNGuard: Turning LLM Hidden Activations into a Training-Free Configurable Guardrail