Guardian-as-an-Advisor: Advancing Next-Generation Guardian Models for Trustworthy LLMs
Not on the map. Why?
Abstract (arXiv)
Hard-gated safety checkers often over-refuse and misalign with a vendor's model spec; prevailing taxonomies also neglect robustness and honesty, yielding safer-on-paper yet less useful systems. This work introduces Guardian-as-an-Advisor (GaaA), a soft-gating pipeline where a guardian predicts a binary risk label plus a concise explanation and prepends this advice to the original query for re-inference, keeping the base model operating under its original spec. To support training and evaluation, GuardSet is constructed, a 208k+ multi-domain dataset unifying harmful and harmless cases with targeted robustness and honesty slices. GuardAdvisor is trained via SFT followed by RL to enforce label-explanation consistency. GuardAdvisor attains competitive detection accuracy while enabling the advisory workflow; when used to augment inputs, responses improve over unaugmented prompts. A latency study shows advisor inference uses below 5% of base-model compute and adds only 2-10% end-to-end overhead under realistic harmful-input rates. Overall, GaaA steers models to comply with the model spec, maintaining safety while reducing over-refusal.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 65 of its 97 references that are in the map. First posted on arXiv 8 Apr 2026.
Builds on
65 of 97 references.
References · 65
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,148
- 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
38 more
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,682
- 2023A Survey of Large Language Modelscited by 2,576
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2024HybridFlow: A Flexible and Efficient RLHF Frameworkcited by 2,057
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,919
- 2018CommonsenseQA: A Question Answering Challenge Targeting Commonsense Knowledgecited by 1,822
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,464
- 2022Competition-Level Code Generation with AlphaCodecited by 1,462
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2017Get To The Point: Summarization with Pointer-Generator Networkscited by 1,292
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 656
- 2023Bias and Fairness in Large Language Models: A Surveycited by 639
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
- 2024RewardBench: Evaluating Reward Models for Language Modelingcited by 499
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 423
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 401
- 2024A StrongREJECT for Empty Jailbreakscited by 385
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 284
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 243
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 231
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
- 2023Should ChatGPT be Biased? Challenges and Risks of Bias in Large Language Modelscited by 148
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
- 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrailscited by 132
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 100
- 2024Lisa: Lazy Safety Alignment for Large Language Models against Harmful Fine-tuning Attackcited by 92
- 2024Safeguarding Large Language Models: A Surveycited by 78
- 2023SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Modelscited by 76
- 2025SealQA: Raising the Bar for Reasoning in Search-Augmented Language Modelscited by 75
50 most cited of 65 All 65 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026LatentGuard: Efficient and Inspectable Latent Reasoning for LLM Safeguards
- 2026Risk-Adjusted Harm Scoring for Automated Red Teaming for LLMs in Financial Services
- 2026Safeguarding LLMs via Model-Agnostic Latent Safety Signals from Dark Knowledge
- 2025SAFEx: Analyzing Vulnerabilities of MoE-Based LLMs via Stable Safety-critical Expert Identification
- 2026Breaking Bad: Interpretability-Based Safety Audits of State-of-the-Art LLMs
- 2025Can You Trust an LLM with Your Life-Changing Decision? An Investigation into AI High-Stakes Responses
- 2026Ventor-QTest: Threat-Model-Driven Verification of Vendor-Hosted LLM APIs
- 2026CourtGuard: A Model-Agnostic Framework for Zero-Shot Policy Adaptation in LLM Safety