Fence: Specialized SLM Guardrails for LLM Applications
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Real-world applications that use closed-source large language models (LLMs) need advanced safety measures that go beyond the basic content filters. Content moderation filters such as toxicity and bias have relatively standard definitions where as application specific guardrails like hallucination, topic drift and behaviour deviation are more difficult to model and can vary by use case. Additionally, data scarcity and annotation costs, make the process of creating and testing specialized guardrails challenging. In this work, we propose using Small Language Models (SLMs) trained on synthetic data as specialized guardrails for LLM applications. We introduce a novel synthetic data generation method inspired by the design of Generative Adversarial Networks (GANs) to generate high quality synthetic data samples which can be used to train SLMs to encode use case specific guardrail information and hence function as specialized guardrails. Our experiments demonstrate that SLM guardrails trained on high quality synthetic data show performance gains over prompt based LLM guardrails.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 13 of its 19 references that are in the map. First posted on arXiv 22 May 2026.
Builds on
13 of 19 references.
Closest ancestors · 1
Same direction, newest first
Other references · 12
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
- 2023The Curse of Recursion: Training on Generated Data Makes Models Forgetcited by 343
- 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 337
- 2024Replacing Judges with Juries: Evaluating LLM Generations with a Panel of Diverse Modelscited by 301
- 2023The False Promise of Imitating Proprietary LLMscited by 254
- 2024SLM-Mod: Small Language Models Surpass LLMs at Content Moderationcited by 27
Built on by
Not cited yet.