mlsanityData to 7 Oct 2026

Fence: Specialized SLM Guardrails for LLM Applications

arXiv 2607.18268 ↗First posted 22 May 2026cs.AIcited by 0

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Real-world applications that use closed-source large language models (LLMs) need advanced safety measures that go beyond the basic content filters. Content moderation filters such as toxicity and bias have relatively standard definitions where as application specific guardrails like hallucination, topic drift and behaviour deviation are more difficult to model and can vary by use case. Additionally, data scarcity and annotation costs, make the process of creating and testing specialized guardrails challenging. In this work, we propose using Small Language Models (SLMs) trained on synthetic data as specialized guardrails for LLM applications. We introduce a novel synthetic data generation method inspired by the design of Generative Adversarial Networks (GANs) to generate high quality synthetic data samples which can be used to train SLMs to encode use case specific guardrail information and hence function as specialized guardrails. Our experiments demonstrate that SLM guardrails trained on high quality synthetic data show performance gains over prompt based LLM guardrails.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 13 of its 19 references that are in the map. First posted on arXiv 22 May 2026.

Builds on

13 of 19 references.

Closest ancestors · 1

Same direction, newest first

  1. 2025Lightweight Safety Guardrails via Synthetic Data and RL-guided Adversarial Training11 Jul

Other references · 12

  1. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  2. 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
  3. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
  4. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
  5. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  6. 2022Red Teaming Language Models with Language Modelscited by 983
  7. 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
  8. 2023The Curse of Recursion: Training on Generated Data Makes Models Forgetcited by 343
  9. 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 337
  10. 2024Replacing Judges with Juries: Evaluating LLM Generations with a Panel of Diverse Modelscited by 301
  11. 2023The False Promise of Imitating Proprietary LLMscited by 254
  12. 2024SLM-Mod: Small Language Models Surpass LLMs at Content Moderationcited by 27

Built on by

Not cited yet.