PAM: Training Policy-Aligned Moderation Filters at Scale
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Large language models (LLMs) remain vulnerable to misalignment and jailbreaks, making external safeguards like moderation filters essential, yet existing filters often focus narrowly on safety, falling short of the broader alignment needs seen in real-world deployments. We introduce Policy Aligned Moderation (PAM), a flexible framework for training custom moderation filters grounded in user-defined policies that extend beyond conventional safety objectives. PAM automates training data generation without relying on human-written examples, enabling scalable support for diverse, application-specific alignment goals and generation policies. PAM-trained filters match the performance of state-of-the-art safety moderation filters and policy reasoning models, and outperform them on PAMbench, four newly introduced user-annotated policy enforcement benchmarks that target age restrictions, dietary accommodations, cultural alignment, and limitations in medical guidance. These performance gains are achieved while the PAM filter runs 5-100x faster at inference than policy-conditioned reasoning models.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 26 of its 43 references that are in the map. First posted on arXiv 26 May 2025.
Builds on
26 of 43 references.
Closest ancestors · 4
Same direction, newest first
- 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails15 Jan
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preference20 Jun
- 2023Fundamental Limitations of Alignment in Large Language Models19 Apr
Other references · 22
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 672
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 423
10 more
- 2023AI Alignment: A Comprehensive Surveycited by 263
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 243
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2024Automatic and Universal Prompt Injection Attacks against Large Language Modelscited by 119
- 2025Fanar: An Arabic-Centric Multimodal Generative AI Platformcited by 67
- 2024MedSafetyBench: Evaluating and Improving the Medical Safety of Large Language Modelscited by 44
- 2023What's the Magic Word? A Control Theory of LLM Promptingcited by 41
- 2024WildVis: Open Source Visualizer for Million-Scale Chat Logs in the Wildcited by 20
- 2024Arabic Dataset for LLM Safeguard Evaluationcited by 17
- 2025MinorBench: A hand-built benchmark for content-based risks for childrencited by 9
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026PolicyAlign: Direct Policy-Based Safety Alignment for Large Language Models
- 2025Towards Trustworthy Multimodal Moderation via Policy-Aligned Reasoning and Hierarchical Labeling
- 2026SafeSteer: Localized On-Policy Distillation for Efficient Safety Alignment
- 2026Open-Domain Safety Policy Construction
- 2025Constrained Language Model Policy Optimization via Risk-aware Stepwise Alignment
- 2025Policy-as-Prompt: Rethinking Content Moderation in the Age of Large Language Models
- 2025Soteria: Language-Specific Functional Parameter Steering for Multilingual Safety Alignment
- 2024Controllable Safety Alignment: Inference-Time Adaptation to Diverse Safety Requirements