mlsanityData to 7 Oct 2026

ConsisGuard: Aligning Safety Deliberation with Policy Enforcement in LLM Guardrails

arXiv 2605.31073 ↗First posted 29 May 2026cs.CLcited by 1

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 1 more
Abstract (arXiv)

Reasoning-based LLM guardrails improve safety moderation by generating explicit rationales before issuing final decisions. However, their rationales do not always lead to faithful enforcement: a model may recognize a harmful intent in its reasoning but still predict a safe label, or issue an unsafe decision without policy-grounded justification. We identify this safety-critical failure mode as the deliberation-to-enforcement gap. Unlike general chain-of-thought faithfulness, guardrail reliability requires policy execution consistency: the generated reasoning should be grounded in the safety policy, and the final decision should be entailed by that reasoning. We propose ConsisGuard, a consistency-aware framework for reasoning-based LLM guardrails. ConsisGuard performs Policy-to-Decision Trajectory Distillation and Functional Coupling Alignment, aligning the internal coupling between safety deliberation and decision enforcement. Experiments on prompt and response harmfulness detection benchmarks show that ConsisGuard improves detection performance while reducing policy execution failures. These results suggest that reliable reasoning-based guardrails require accurate faithful execution of safety policies.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 20 of its 32 references that are in the map. First posted on arXiv 29 May 2026.

Builds on

20 of 32 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrails19 Feb
  2. 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan

Other references · 18

  1. 2024The Llama 3 Herd of Modelscited by 14,192
  2. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
  3. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 828
  4. 2024A Survey on Large Language Models for Code Generationcited by 646
  5. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 630
  6. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
  7. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
  8. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 225
  9. 2024A Survey on Recent Advances in LLM-Based Multi-turn Dialogue Systemscited by 170
  10. 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
  11. 2025Measuring Chain of Thought Faithfulness by Unlearning Reasoning Stepscited by 43
  12. 2025Bring Reason to Vision: Understanding Perception and Reasoning through Model Mergingcited by 40
6 more
  1. 2024Inverse Constitutional AI: Compressing Preferences into Principlescited by 39
  2. 2024Towards Better Chain-of-Thought: A Reflection on Effectiveness and Faithfulnesscited by 20
  3. 2025Chain-of-Thought Prompting Obscures Hallucination Cues in Large Language Models: An Empirical Evaluationcited by 20
  4. 2023Zero-Resource Hallucination Prevention for Large Language Modelscited by 19
  5. 2024A Causal Explainable Guardrails for Large Language Modelscited by 18
  6. 2026QuitoBench: A High-Quality Open Time Series Forecasting Benchmarkcited by 9

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026A Dual-Hypothesis Reasoning Framework for LLM Guardrails
  2. 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrails
  3. 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning
  4. 2026PL-Guard: Probabilistic Logic Reasoning for LLM Guardrails
  5. 2026AdaGuard: Enhancing Safety and Policy Compliance with Reasoning-Enabled LLM-As-A-Judge Guardrails
  6. 2025Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Models
  7. 2025GSPR: Aligning LLM Safeguards as Generalizable Safety Policy Reasoners
  8. 2026DT-Guard: Intent-Driven Reasoning-Active Training for Reasoning-Free LLM Safety Guardrail