YuFeng-XGuard: A Reasoning-Centric, Interpretable, and Flexible Guardrail Model for Large Language Models
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
As large language models (LLMs) are increasingly deployed in real-world applications, safety guardrails are required to go beyond coarse-grained filtering and support fine-grained, interpretable, and adaptable risk assessment. However, existing solutions often rely on rapid classification schemes or post-hoc rules, resulting in limited transparency, inflexible policies, or prohibitive inference costs. To this end, we present YuFeng-XGuard, a reasoning-centric guardrail model family designed to perform multi-dimensional risk perception for LLM interactions. Instead of producing opaque binary judgments, YuFeng-XGuard generates structured risk predictions, including explicit risk categories and configurable confidence scores, accompanied by natural language explanations that expose the underlying reasoning process. This formulation enables safety decisions that are both actionable and interpretable. To balance decision latency and explanatory depth, we adopt a tiered inference paradigm that performs an initial risk decision based on the first decoded token, while preserving ondemand explanatory reasoning when required. In addition, we introduce a dynamic policy mechanism that decouples risk perception from policy enforcement, allowing safety policies to be adjusted without model retraining. Extensive experiments on a diverse set of public safety benchmarks demonstrate that YuFeng-XGuard achieves stateof-the-art performance while maintaining strong efficiency-efficacy trade-offs. We release YuFeng-XGuard as an open model family, including both a full-capacity variant and a lightweight version, to support a wide range of deployment scenarios.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 15 of its 29 references that are in the map. First posted on arXiv 22 Jan 2026.
Builds on
15 of 29 references.
References · 15
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2025Qwen3 Technical Reportcited by 8,195
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
- 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,258
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 960
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 252
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 224
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 222
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
3 more
Built on by
Citing papers per year: 2026: 14.
14 papers.
Sort:
By area:
- 2026Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verificationcited by 6
- 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrailscited by 4
- 2026BraveGuard: From Open-World Threats to Safer Computer-Use Agentscited by 4
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoningcited by 4
- 2026DT-Guard: Intent-Driven Reasoning-Active Training for Reasoning-Free LLM Safety Guardrailcited by 0
- 2026A Dual-Hypothesis Reasoning Framework for LLM Guardrailscited by 0
- 2026Yesterday's Shield, Today's Spear: A Self-Evolving Safety Guardrail in Productioncited by 0
- 2026TRACE: An Evidence-Grounded Benchmark for Safety Evaluation of Large Reasoning Modelscited by 0
- 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasioncited by 0
- 2026SingProbe Technical Reportcited by 0
- 2026HiveTraceGuard-Pro: A Compact Generative Guardrail for Prompt Injection, Jailbreaks, and Adversarial Obfuscationcited by 0
- 2026Who Judges the Judges? A Chinese Safety QA Benchmark for Evaluating LLM Responses and Safety Judgescited by 0
2 more
- 2026AdaGuard: An Adaptive Guard Model with User-defined Policies28 Sep 2026
- 2026HazardAuditor: From Executable Threats to Safer Computer-Use Agents14 Sep 2026
- 2026Who Judges the Judges? A Chinese Safety QA Benchmark for Evaluating LLM Responses and Safety Judges1 Sep 2026
- 2026HiveTraceGuard-Pro: A Compact Generative Guardrail for Prompt Injection, Jailbreaks, and Adversarial Obfuscation1 Sep 2026
- 2026SingProbe Technical Report31 Aug 2026
- 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasion28 Aug 2026
- 2026TRACE: An Evidence-Grounded Benchmark for Safety Evaluation of Large Reasoning Models25 Aug 2026
- 2026Yesterday's Shield, Today's Spear: A Self-Evolving Safety Guardrail in Production9 Aug 2026
- 2026A Dual-Hypothesis Reasoning Framework for LLM Guardrails20 Jul 2026
- 2026DT-Guard: Intent-Driven Reasoning-Active Training for Reasoning-Free LLM Safety Guardrail7 Jul 2026
- 2026Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification2 Jul 2026
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoning22 Jun 2026
2 more
- 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrailscited by 4
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoningcited by 4
- 2026DT-Guard: Intent-Driven Reasoning-Active Training for Reasoning-Free LLM Safety Guardrailcited by 0
- 2026A Dual-Hypothesis Reasoning Framework for LLM Guardrailscited by 0
- 2026TRACE: An Evidence-Grounded Benchmark for Safety Evaluation of Large Reasoning Modelscited by 0
- 2026TRACE: An Evidence-Grounded Benchmark for Safety Evaluation of Large Reasoning Models25 Aug 2026
- 2026A Dual-Hypothesis Reasoning Framework for LLM Guardrails20 Jul 2026
- 2026DT-Guard: Intent-Driven Reasoning-Active Training for Reasoning-Free LLM Safety Guardrail7 Jul 2026
- 2026SingGuard: A Policy-Adaptive Multimodal LLM Guardrail with Dynamic Reasoning22 Jun 2026
- 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrails17 May 2026
- 2026Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verificationcited by 6
- 2026BraveGuard: From Open-World Threats to Safer Computer-Use Agentscited by 4
- 2026HazardAuditor: From Executable Threats to Safer Computer-Use Agentscited by 0
- 2026AdaGuard: An Adaptive Guard Model with User-defined Policiescited by 0
- 2026AdaGuard: An Adaptive Guard Model with User-defined Policies28 Sep 2026
- 2026HazardAuditor: From Executable Threats to Safer Computer-Use Agents14 Sep 2026
- 2026Safety Testing LLM Agents at Scale: From Risk Discovery to Evidence-Grounded Verification2 Jul 2026
- 2026BraveGuard: From Open-World Threats to Safer Computer-Use Agents31 May 2026
Similar, not cited
Close in wording, no citation either way
- 2026Robust and Efficient Guardrails with Latent Reasoning
- 2025Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Models
- 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrails
- 2026PL-Guard: Probabilistic Logic Reasoning for LLM Guardrails
- 2025RSafe: Incentivizing proactive reasoning to build robust and adaptive LLM safeguards
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety
- 2025SafeRBench: Dissecting the Reasoning Safety of Large Language Models
- 2026CHILLGuard: Towards Fine-Grained Chinese LLM Safety Guardrail with Scalable Data Construction and Model-aware Preference Alignment