DT-Guard: Intent-Driven Reasoning-Active Training for Reasoning-Free LLM Safety Guardrail
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
Large language models deployed in open-world applications require safety guardrails that are both robust to complex risks and efficient enough for low-latency runtime moderation. Existing guardrails face a practical trade-off between lightweight classification-based models, which are efficient but often struggle with concealed intent, ambiguous semantics, and borderline safety decisions, and reasoning-based guards, which improve judgment quality but introduce additional token generation and inference latency. We present DT-Guard, a content safety guardrail model based on a Reasoning-Active Training, Reasoning-Free Inference paradigm. The key idea is to use reasoning supervision during training while emitting only structured safety labels at inference time. DT-Guard formulates safety judgment as a progressive decision process, Intent - Category - Safety, and constructs an intent-driven dataset with intent labels, risk categories, safety labels, and structured reasoning trajectories. To further improve hard-case robustness, we propose Rollout-Guided Progressive Hard-Case Optimization (RG-PHO), which uses multi-rollout consistency to identify stably mastered, persistently failed, and preference-unstable samples, and applies targeted supervised and preference optimization accordingly. At inference time, DT-Guard directly generates structured labels without explicit reasoning traces, preserving deployment efficiency. Experiments on prompt-side and response-side safety benchmarks show that DT-Guard achieves average F1 scores of 0.886 and 0.870, respectively. With only a 4B backbone, it reaches a dual-side average F1 of 0.878, outperforming strong 8B guardrail baselines. These results demonstrate that reasoning supervision can be effectively internalized into low-latency safety discrimination.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 14 of its 18 references that are in the map. First posted on arXiv 7 Jul 2026.
Builds on
14 of 18 references.
Closest ancestors · 3
Same direction, newest first
- 2026Ling and Ring 2.6 Technical Report: Efficient and Instant Agentic Intelligence at Trillion-Parameter Scale13 Jun
- 2026YuFeng-XGuard: A Reasoning-Centric, Interpretable, and Flexible Guardrail Model for Large Language Models22 Jan
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan
Other references · 11
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2025OpenAI GPT-5 System Cardcited by 910
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 224
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
- 2025Qwen3Guard Technical Reportcited by 125
- 2023AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Modelscited by 102
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 57
- 2025Mitigating Jailbreaks with Intent-Aware LLMscited by 4
- 2025Exploring the Vulnerability of the Content Moderation Guardrail in Large Language Models via Intent Manipulationcited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Robust and Efficient Guardrails with Latent Reasoning
- 2025Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Models
- 2025RSafe: Incentivizing proactive reasoning to build robust and adaptive LLM safeguards
- 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning
- 2026A Dual-Hypothesis Reasoning Framework for LLM Guardrails
- 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrails
- 2026Paved with True Intents: Intent-Aware Training Improves LLM Safety Classification Across Training Regimes
- 2026ConsisGuard: Aligning Safety Deliberation with Policy Enforcement in LLM Guardrails