SPOT: Selective Prompt Projection via Total Variation for Inference-Only Safe Text-to-Image Generation
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
Text-to-Image (T2I) diffusion models enable high quality open ended synthesis, but practical use requires suppressing unsafe generations while preserving behavior on benign prompts. We study this tension relative to the frozen generator, using its prompt conditioned distribution as the preservation reference. Since T2I safety is commonly evaluated by bounded risk scores on generated images, total variation (TV) bounds how much expected risk can change from this reference. We call this fixed reference constraint the Safety-Prompt Alignment Tradeoff (SPAT): reducing expected unsafety requires prompt conditioned distributional deviation. To make this deviation selective and adjustable, we define the tau safe set as prompts whose reference risk is at most tau, and cast intervention as projection toward nearby prompts in this set. We propose Selective Prompt prOjecTion (SPOT), an inference time framework that approximates this projection without retraining the generator or learning a category specific rewriter. SPOT uses an LLM to rank candidate rewrites and a safeguard VLM to accept generated images under the same tau. Across four datasets and three diffusion backbones, SPOT achieves relative inappropriate (IP) score reductions from 14.2% to 44.4% over strong safety alignment baselines while keeping benign prompt behavior close to the fixed reference.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 32 of its 41 references that are in the map. First posted on arXiv 31 Jan 2026.
Builds on
32 of 41 references.
Closest ancestors · 11
Same direction, newest first
- 2025Value-Aligned Prompt Moderation via Zero-Shot Agentic Rewriting for Safe Image Generation12 Nov
- 2024Safeguarding Text-to-Image Generation via Inference-Time Prompt-Noise Optimization5 Dec
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
Other references · 21
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,779
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
- 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,168
- 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,414
- 2021Unsupervised Dense Information Retrieval with Contrastive Learningcited by 1,203
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2017Are GANs Created Equal? A Large-Scale Studycited by 267
- 2023Do LLMs exhibit human-like response biases? A case study in survey designcited by 176
9 more
- 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 150
- 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 68
- 2024GuardT2I: Defending Text-to-Image Models from Adversarial Promptscited by 61
- 2023Typology of Risks of Generative Text-to-Image Modelscited by 55
- 2024Universal Prompt Optimizer for Safe Text-to-Image Generationcited by 27
- 2024AlignGuard: Scalable Safety Alignment for Text-to-Image Generationcited by 17
- 2025PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Modelscited by 16
- 2025Iterative Prompt Refinement for Safer Text-to-Image Generationcited by 6
- 2025Acquiescence Bias in Large Language Modelscited by 5
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Test-Time Scaling for Safe Text-Guided Image Generation via Intermediate Clean Estimates
- 2026DTVI: Dual-Stage Textual and Visual Intervention for Safe Text-to-Image Generation
- 2025T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation
- 2026Introspective Attention Modulation for Safe Text-to-Image Generation
- 2026Modular Energy Steering for Safe Text-to-Image Generation with Foundation Models
- 2025SafeCtrl: Region-Based Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
- 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization
- 2025SPQR: A Multi-Dimensional Benchmark for Safety Alignment under Benign Model Adaptation