Customize Multi-modal RAI Guardrails with Precedent-based predictions
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
A multi-modal guardrail must effectively filter image content based on user-defined policies, identifying material that may be hateful, reinforce harmful stereotypes, contain explicit material, or spread misinformation. Deploying such guardrails in real-world applications, however, poses significant challenges. Users often require varied and highly customizable policies and typically cannot provide abundant examples for each custom policy. Consequently, an ideal guardrail should be scalable to the multiple policies and adaptable to evolving user standards with minimal retraining. Existing fine-tuning methods typically condition predictions on pre-defined policies, restricting their generalizability to new policies or necessitating extensive retraining to adapt. Conversely, training-free methods struggle with limited context lengths, making it difficult to incorporate all the policies comprehensively. To overcome these limitations, we propose to condition model's judgment on "precedents", which are the reasoning processes of prior data points similar to the given input. By leveraging precedents instead of fixed policies, our approach greatly enhances the flexibility and adaptability of the guardrail. In this paper, we introduce a critique-revise mechanism for collecting high-quality precedents and two strategies that utilize precedents for robust prediction. Experimental results demonstrate that our approach outperforms previous methods across both few-shot and full-dataset scenarios and exhibits superior generalization to novel policies.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 21 of its 29 references that are in the map. First posted on arXiv 28 Jul 2025.
Builds on
21 of 29 references.
Closest ancestors · 2
Same direction, newest first
- 2024Safeguarding Large Language Models: A Survey3 Jun
- 2024Building Guardrails for Large Language Models2 Feb
Other references · 19
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2023GPT-4 Technical Reportcited by 18,396
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2023Visual Instruction Tuningcited by 7,869
- 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,852
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2021Unsupervised Dense Information Retrieval with Contrastive Learningcited by 1,216
- 2023SGLang: Efficient Execution of Structured Language Model Programscited by 1,141
- 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 841
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Modelscited by 274
7 more
- 2022Red-Teaming the Stable Diffusion Safety Filtercited by 264
- 2020Not only Look, but also Listen: Learning Multimodal Violence Detection under Weak Supervisioncited by 238
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Modelscited by 175
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2023Holistic Evaluation of Text-To-Image Modelscited by 160
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
- 2024UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Imagescited by 53
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Towards Policy-Adaptive Image Guardrail: Benchmark and Method
- 2025SafeVision: Efficient Image Guardrail with Robust Policy Adherence and Explainability
- 2026GuardReasoner-Omni: A Reasoning-based Multi-modal Guardrail for Text, Image, Video, and Audio
- 2026BARRED: Synthetic Training of Custom Policy Guardrails via Asymmetric Debate
- 2024SafeWatch: An Efficient Safety-Policy Following Video Guardrail Model with Transparent Explanations
- 2024LlavaGuard: An Open VLM-based Framework for Safeguarding Vision Datasets and Models
- 2026Do Safety Guardrails Need to Reason? LeanGuard: A Fast and Light Approach for Robust Moderation
- 2025Protect: Towards Robust Guardrailing Stack for Trustworthy Enterprise LLM Systems