Beyond the Safety Tax: Mitigating Unsafe Text-to-Image Generation via External Safety Rectification
Not on the map. Why?
Abstract (arXiv)
Text-to-image (T2I) generative models have achieved remarkable visual fidelity, yet remain vulnerable to generating unsafe content. Existing safety defenses typically intervene internally within the generative model, but suffer from severe concept entanglement, leading to degradation of benign generation quality, a trade-off we term the Safety Tax. To overcome this limitation, we advocate a paradigm shift from destructive internal editing to external safety rectification. Following this principle, we propose SafePatch, a structurally isolated safety module that performs external, interpretable rectification without modifying the base model. The core backbone of SafePatch is architecturally instantiated as a trainable clone of the base model's encoder, allowing it to inherit rich semantic priors and maintain representation consistency. To enable interpretable safety rectification, we construct a strictly aligned counterfactual safety dataset (ACS) for differential supervision training. Across nudity and multi-category benchmarks and recent adversarial prompt attacks, SafePatch achieves robust unsafe suppression (7% unsafe on I2P) while preserving image quality and semantic alignment.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 19 of its 31 references that are in the map. First posted on arXiv 28 Aug 2025.
Builds on
19 of 31 references.
References · 19
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
- 2018Datasheets for Datasetscited by 1,386
- 2022Toy Models of Superpositioncited by 971
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 327
- 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
7 more
- 2022Red-Teaming the Stable Diffusion Safety Filtercited by 264
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?cited by 250
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Modelscited by 189
- 2023Self-Discovering Interpretable Diffusion Latent Directions for Responsible Text-to-Image Generationcited by 69
- 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Modelscited by 66
- 2025Side Effects of Erasing Concepts from Diffusion Modelscited by 13
- 2025Erasing More Than Intended? How Concept Erasure Degrades the Generation of Non-Target Conceptscited by 12
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Safe Text-to-Image Generation: Simply Sanitize the Prompt Embedding
- 2026SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
- 2025SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models
- 2026Safe Image Generation via Reinforcement Learning
- 2026Introspective Attention Modulation for Safe Text-to-Image Generation
- 2026DTVI: Dual-Stage Textual and Visual Intervention for Safe Text-to-Image Generation
- 2026SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models
- 2026Open Models, Open Risks: Measuring Unsafe Generation in Text-to-Image Models In the Wild