Efficient Safety Guardrails through Latent Dual-Hypothesis Reasoning with On-Demand Trace Reconstruction
On the map: LLM reasoning → Test-time compute and efficient thinking also fits: Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
Guardrail approaches that rely on reasoning-based large language models (LLM) improve safety decisions, but come with substantial inference overhead due to the explicit reasoning. We introduce LR-Guard (Latent Reasoning Guardrail), an efficient and explainable guardrail that jointly learns structured latent reasoning and on-demand reasoning reconstruction. Our method distills a frozen teacher's analysis of safe and unsafe prompt interpretations and their comparison into compact latent representations. Joint training optimizes these representations for both safety prediction and reconstruction of the teacher's explicit reasoning traces, enabling human-readable explanations without requiring intermediate text generation for every decision. Experiments show that LR-Guard outperforms its explicit-reasoning teacher in most in-domain and out-of-domain settings on safety classification and explanation extraction, while achieving a 19.4x inference speedup at batch size one. Further, reconstructed reasoning traces from the latent information exhibit high semantic similarity to the teacher's explicit reasoning.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Test-time compute and efficient thinking, one of 17 directions in LLM reasoning. Builds on 12 of its 26 references that are in the map. First posted on arXiv 13 Oct 2026.
Builds on
12 of 26 references.
References · 12
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023Language Models Don't Always Say What They Think: Unfaithful Explanations in Chain-of-Thought Promptingcited by 1,122
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
- 2025CODI: Compressing Chain-of-Thought into Continuous Space via Self-Distillationcited by 225
- 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrailscited by 132
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 100
- 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrailscited by 31
- 2025Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Modelscited by 16
- 2026LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrailscited by 5
- 2026A Lightweight Explainable Guardrail for Prompt Safetycited by 1
- 2026Robust and Efficient Guardrails with Latent Reasoningcited by 1
- 2026A Dual-Hypothesis Reasoning Framework for LLM Guardrailscited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026DT-Guard: Intent-Driven Reasoning-Active Training for Reasoning-Free LLM Safety Guardrail
- 2026YuFeng-XGuard: A Reasoning-Centric, Interpretable, and Flexible Guardrail Model for Large Language Models
- 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning
- 2026TRACE: An Evidence-Grounded Benchmark for Safety Evaluation of Large Reasoning Models
- 2026Self-Guard: Defending Large Reasoning Models via enhanced self-reflection
- 2026PL-Guard: Probabilistic Logic Reasoning for LLM Guardrails
- 2026LatentGuard: Efficient and Inspectable Latent Reasoning for LLM Safeguards
- 2025Strong but Brittle: Simple Attacks Subvert Reasoning-based Safety Guardrails