mlsanityData to 14 Oct 2026

Green Shielding: A User-Centric Approach Towards Trustworthy AI

arXiv 2604.24700 ↗First posted 27 Apr 2026cs.CL cs.AIcited by 0

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Large language models (LLMs) are increasingly deployed, yet their outputs can be highly sensitive to routine, non-adversarial variation in how users phrase queries, a gap not well addressed by existing red-teaming efforts. We propose Green Shielding, a user-centric agenda for building evidence-backed deployment guidance by characterizing how benign input variation shifts model behavior. We operationalize this agenda through the CUE criteria: benchmarks with authentic Context, reference standards and metrics that capture true Utility, and perturbations that reflect realistic variations in the Elicitation of model behavior. Guided by the PCS framework and developed with practicing physicians, we instantiate Green Shielding in medical diagnosis through HealthCareMagic-Diagnosis (HCM-Dx), a benchmark of patient-authored queries, together with structured reference diagnosis sets and clinically grounded metrics for evaluating differential diagnosis lists. We also study perturbation regimes that capture routine input variation and show that prompt-level factors shift model behavior along clinically meaningful dimensions. Across multiple frontier LLMs, these shifts trace out Pareto-like tradeoffs. In particular, neutralization, which removes common user-level factors while preserving clinical content, increases plausibility and yields more concise, clinician-like differentials, but reduces coverage of highly likely and safety-critical conditions. Together, these results show that interaction choices can systematically shift task-relevant properties of model outputs and support user-facing guidance for safer deployment in high-stakes domains. Although instantiated here in medical diagnosis, the agenda extends naturally to other decision-support settings and agentic AI systems.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 52 of its 64 references that are in the map. First posted on arXiv 27 Apr 2026.

Builds on

52 of 64 references.

References · 52

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  3. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  4. 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
  5. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  6. 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,276
  7. 2022Large Language Models Encode Clinical Knowledgecited by 1,830
  8. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  9. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,601
  10. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  11. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  12. 2024A Survey on LLM-as-a-Judgecited by 1,423
38 more
  1. 2020What Disease does this Patient Have? A Large-scale Open Domain Question Answering Dataset from Medical Examscited by 1,356
  2. 2019PubMedQA: A Dataset for Biomedical Research Question Answeringcited by 1,288
  3. 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
  4. 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
  5. 2022Red Teaming Language Models with Language Modelscited by 1,026
  6. 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 817
  7. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
  8. 2022MedMCQA : A Large-scale Multi-Subject Multi-Choice Dataset for Medical domain Question Answeringcited by 543
  9. 2024InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agentscited by 538
  10. 2024From Crowdsourced Data to High-Quality Benchmarks: Arena-Hard and BenchBuilder Pipelinecited by 500
  11. 2025HealthBench: Evaluating Large Language Models Towards Improved Human Healthcited by 429
  12. 2024StruQ: Defending Against Prompt Injection with Structured Queriescited by 375
  13. 2024Justice or Prejudice? Quantifying Biases in LLM-as-a-Judgecited by 368
  14. 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 364
  15. 2024Hallucination is Inevitable: An Innate Limitation of Large Language Modelscited by 332
  16. 2023ChatDoctor: A Medical Chat Model Fine-Tuned on a Large Language Model Meta-AI (LLaMA) Using Medical Domain Knowledgecited by 325
  17. 2024JudgeBench: A Benchmark for Evaluating LLM-based Judgescited by 318
  18. 2024Judging the Judges: A Systematic Study of Position Bias in LLM-as-a-Judgecited by 269
  19. 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 267
  20. 2023Certifying LLM Safety against Adversarial Promptingcited by 266
  21. 2023Large Language Models Sensitivity to The Order of Options in Multiple-Choice Questionscited by 263
  22. 2024Self-Preference Bias in LLM-as-a-Judgecited by 258
  23. 2025MedXpertQA: Benchmarking Expert-Level Medical Reasoning and Understandingcited by 224
  24. 2023An Overview of Catastrophic AI Riskscited by 222
  25. 2020Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defensescited by 180
  26. 2024ProSA: Assessing and Understanding the Prompt Sensitivity of LLMscited by 149
  27. 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 127
  28. 2025SycEval: Evaluating LLM Sycophancycited by 108
  29. 2025Measuring Sycophancy of Language Models in Multi-turn Dialoguescited by 104
  30. 2022Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoningcited by 94
  31. 2021Demystifying the Draft EU Artificial Intelligence Actcited by 84
  32. 2024TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Modelscited by 67
  33. 2019Veridical Data Sciencecited by 66
  34. 2025MedHELM: Holistic Evaluation of Large Language Models for Medical Taskscited by 64
  35. 2024POSIX: A Prompt Sensitivity Index For Large Language Modelscited by 59
  36. 2025Benchmarking Prompt Sensitivity in Large Language Modelscited by 38
  37. 2024Open (Clinical) LLMs are Sensitive to Instruction Phrasingscited by 24
  38. 2025Towards LLMs Robustness to Changes in Prompt Format Stylescited by 21

50 most cited of 52 All 52 (JSON)

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Addressing Benchmarking Gaps in Large Language Models for Health and Medicine with Dynamic Red-Teaming
  2. 2024Ensuring Safety and Trust: Analyzing the Risks of Large Language Models in Medicine
  3. 2026When Large Language Models Fail in Healthcare: Evaluating Sensitivity to Prompt Variations
  4. 2026Rethinking LLM Verification: Evidence Structure, Uncertainty, and Selective Refinement
  5. 2023Building Trustworthy NeuroSymbolic AI Systems: Consistency, Reliability, Explainability, and Safety
  6. 2025Beyond the Leaderboard: Rethinking Medical Benchmarks for Large Language Models
  7. 2026GPAgentBench-2K: Benchmarking Large Language Model Agents in Complex Clinical Action Space
  8. 2024Critique of Impure Reason: Unveiling the reasoning behaviour of medical Large Language Models