Learning Efficient Guardrails for Compliance
On the map: LLM agents and tool use → Agent threats, guardrails and governance
also in 1 more
Abstract (arXiv)
Autonomous web agents are increasingly deployed for long-horizon tasks, yet their ability to adhere to real-world policies remains critically underexplored compared to standard safety objectives. To address this gap, we introduce PolicyGuardBench, a benchmark of 60k policy-trajectory pairs designed to evaluate compliance through both full-trajectory and novel prefix-based violation detection tasks. Using this dataset, we train PolicyGuard, a lightweight guardrail model that achieves strong detection accuracy while maintaining high inference efficiency. Notably, our model demonstrates robust generalization capabilities, preserving high performance even on unseen domains. These contributions establish a comprehensive framework for studying policy compliance, showing that accurate and generalizable guardrails are feasible at small scales.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 41 of its 54 references that are in the map. First posted on arXiv 3 Oct 2025.
Builds on
41 of 54 references.
Closest ancestors · 9
Same direction, newest first
- 2025HarmonyGuard: Toward Safety and Utility in Web Agents via Adaptive Policy Enhancement and Dual-Objective Optimization6 Aug
- 2025WebGuard: Building a Generalizable Guardrail for Web Agents18 Jul
- 2025OpenAgentSafety: A Comprehensive Framework for Evaluating Real-World AI Agent Safety8 Jul
- 2025LlamaFirewall: An open source guardrail system for building secure AI agents6 May
- 2025ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning26 Mar
- 2025SafeArena: Evaluating the Safety of Autonomous Web Agents6 Mar
- 2025AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection17 Feb
- 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents11 Oct
- 2024ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agents9 Oct
Other references · 32
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2024GPT-4o System Cardcited by 4,467
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,064
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,155
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,081
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIscited by 1,880
- 2025Gemma 3 Technical Reportcited by 1,686
- 2016Concrete Problems in AI Safetycited by 1,582
- 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,258
20 more
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2020ALFWorld: Aligning Text and Embodied Environments for Interactive Learningcited by 1,143
- 2023Language Agent Tree Search Unifies Reasoning Acting and Planning in Language Modelscited by 551
- 2017Safe Reinforcement Learning via Shieldingcited by 427
- 2024WebRL: Training LLM Web Agents via Self-Evolving Online Curriculum Reinforcement Learningcited by 243
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 224
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 222
- 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrailscited by 122
- 2017Trial without Error: Towards Safe Reinforcement Learning via Human Interventioncited by 102
- 2024Agent-E: From Autonomous Web Navigation to Foundational Design Principles in Agentic Systemscited by 79
- 2024HAICOSYSTEM: An Ecosystem for Sandboxing Safety Risks in Human-AI Interactionscited by 42
- 2024ScribeAgent: Towards Specialized Web Agents Using Production-Scale Workflow Datacited by 39
- 2024TwoStep: Multi-agent Task Planning using Classical Planners and Large Language Modelscited by 29
- 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrailscited by 29
- 2025Diagnosing and Mitigating Modality Interference in Multimodal Large Language Modelscited by 18
- 2024HarmAug: Effective Data Augmentation for Knowledge Distillation of Safety Guard Modelscited by 17
- 2024WebSuite: Systematically Evaluating Why Web Agents Failcited by 16
- 2025Detecting Prefix Bias in LLM-based Reward Modelscited by 11
- 2025GSPR: Aligning LLM Safeguards as Generalizable Safety Policy Reasonerscited by 10
- 2025Maximizing Prefix-Confidence at Test-Time Efficiently Improves Mathematical Reasoningcited by 3
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing
- 2026BARRED: Synthetic Training of Custom Policy Guardrails via Asymmetric Debate
- 2026AdaGuard: Enhancing Safety and Policy Compliance with Reasoning-Enabled LLM-As-A-Judge Guardrails
- 2025Building a Foundational Guardrail for General Agentic Systems via Synthetic Data
- 2026From Risk Classification to Action Plan Remediation: A Guardrail Feedback Driven Framework for LLM Agents
- 2026DreamGuard: Efficient Runtime Guardrail for LLM Agents via Risk-Aware World Model
- 2026SingGuard-NSFA: Extensible Guardrails for Agentic AI via Generative Reasoning and Real-Time Classification
- 2026PL-Guard: Probabilistic Logic Reasoning for LLM Guardrails