Backprompting: Leveraging Synthetic Production Data for Health Advice Guardrails
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
The pervasiveness of large language models (LLMs) in enterprise settings has also brought forth a significant amount of risks associated with their usage. Guardrails technologies aim to mitigate this risk by filtering LLMs' input/output text through various detectors. However, developing and maintaining robust detectors faces many challenges, one of which is the difficulty in acquiring production-quality labeled data on real LLM outputs prior to deployment. In this work, we propose backprompting, a simple yet intuitive solution to generate production-like labeled data for health advice guardrails development. Furthermore, we pair our backprompting method with a sparse human-in-the-loop clustering technique to label the generated data. Our aim is to construct a parallel corpus roughly representative of the original dataset yet resembling real LLM output. We then infuse existing datasets with our synthetic examples to produce robust training data for our detector. We test our technique in one of the most difficult and nuanced guardrails: the identification of health advice in LLM output, and demonstrate improvement versus other solutions. Our detector is able to outperform GPT-4o by up to 3.73%, despite having 400x less parameters.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 24 of its 43 references that are in the map. First posted on arXiv 25 Aug 2025.
Builds on
24 of 43 references.
Closest ancestors · 1
Same direction, newest first
Other references · 23
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,893
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,375
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 454
- 2020Asking and Answering Questions to Evaluate the Factual Consistency of Summariescited by 378
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
- 2021On the Importance of Gradients for Detecting Distributional Shifts in the Wildcited by 339
- 2024On LLMs-Driven Synthetic Data Generation, Curation, and Evaluation: A Surveycited by 244
11 more
- 2021GPT3Mix: Leveraging Large-scale Language Models for Text Augmentationcited by 187
- 2017Learning to Ask: Neural Question Generation for Reading Comprehensioncited by 186
- 2024GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoningcited by 124
- 2024RigorLLM: Resilient Guardrails for Large Language Models against Undesired Contentcited by 68
- 2022ProGen: Progressive Zero-shot Dataset Generation via In-context Feedbackcited by 67
- 2020Template-Based Question Generation from Retrieved Sentences for Improved Unsupervised Question Answeringcited by 39
- 2022Self-Prompting Large Language Models for Zero-Shot Open-Domain QAcited by 39
- 2024LAB: Large-Scale Alignment for ChatBotscited by 39
- 2021Reliable and Trustworthy Machine Learning for Health Using Dataset Shift Detectioncited by 21
- 2019Generating Question-Answer Hierarchiescited by 20
- 2023Maatphor: Automated Variant Analysis for Prompt Injection Attackscited by 14
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Think Fast, Talk Smart: Partitioning Deterministic and Neural Computation for Structured Health Text Generation
- 2025Addressing Benchmarking Gaps in Large Language Models for Health and Medicine with Dynamic Red-Teaming
- 2025Less is More: Adaptive Coverage for Synthetic Training Data
- 2024When in Doubt, Cascade: Towards Building Efficient and Capable Guardrails
- 2024Forewarned is Forearmed: Leveraging LLMs for Data Synthesis through Failure-Inducing Exploration
- 2026A Survey on Evaluating Quality and Trustworthiness in LLM-Generated Data
- 2023Does Synthetic Data Generation of LLMs Help Clinical Text Mining?
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety