Jev-Guard: Fast Routing and Auditing Agent Actions over Editable Policy Trees
On the map: LLM agents and tool use → Agent threats, guardrails and governance
also in 1 more
Abstract (arXiv)
Agent harnesses require a low-latency guardrail model together with customizable audit policies. However, deploying an auto-regressive guardrail model remains challenging: such models incur high inference latency and are often poorly aligned with customized policies. To address these problems, we present Jev-Guard, a unified model for safety classification and policy routing. We further construct a policy tree over which Jev-Guard performs routing, spanning diverse domains including content moderation, cybersecurity, privacy, and legal compliance. Specifically, Jev-Guard first navigates the policy tree to select the applicable audit policy given the caller's audit context, and then performs safety classification conditioned on the retrieved policies. On 7,033 evaluation cases, Jev-Guard achieves 93.72% safety accuracy, a mean latency of 58ms, and 93.10% hierarchical routing accuracy. The full routing-and-classification pipeline averages 240ms. Furthermore, we integrate Jev-Guard into the Hermes harness framework. Across agent trajectories, its separate permission gate cuts mean review time per task from 4.80s for an SFT-LLM judge to 1.33s, with no policy violations are observed for either guard.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 14 of its 29 references that are in the map. First posted on arXiv 13 Oct 2026.
Builds on
14 of 29 references.
Closest ancestors · 2
Same direction, newest first
- 2026ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedback15 Jan
- 2025AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents24 Mar
Other references · 12
- 2021LexGLUE: A Benchmark Dataset for Legal Language Understanding in Englishcited by 310
- 2024Vulnerability Detection with Code Language Models: How Far Are We?cited by 139
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
- 2023DiverseVul: A New Vulnerable Source Code Dataset for Deep Learning Based Vulnerability Detectioncited by 102
- 2025CyberGym: Evaluating AI Agents' Real-World Cybersecurity Capabilities at Scalecited by 78
- 2018CLAUDETTE: an Automated Detector of Potentially Unfair Clauses in Online Terms of Servicecited by 73
- 2019Question Answering for Privacy Policies: Combining Computational and Legal Perspectivescited by 67
- 2025PrivaCI-Bench: Evaluating Privacy with Contextual Integrity and Legal Compliancecited by 37
- 2021Intent Classification and Slot Filling for Privacy Policiescited by 19
- 2025GSPR: Aligning LLM Safeguards as Generalizable Safety Policy Reasonerscited by 13
- 2025SafeMT: Multi-turn Safety for Multimodal Language Modelscited by 6
- 2025Towards Trustworthy Multimodal Moderation via Policy-Aligned Reasoning and Hierarchical Labelingcited by 4
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Learning Efficient Guardrails for Compliance
- 2026SingGuard-NSFA: Extensible Guardrails for Agentic AI via Generative Reasoning and Real-Time Classification
- 2025ShieldAgent: Shielding Agents via Verifiable Safety Policy Reasoning
- 2026HazardAuditor: From Executable Threats to Safer Computer-Use Agents
- 2026StepGuard: Learning Step-Level Guardrails with Scalable Supervision and Safety-Utility Balancing
- 2026SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailing
- 2026SafePred: A Predictive Guardrail for Computer-Using Agents via World Models
- 2026Safe Actions Alone Do Not Ensure Safe Agents: Identifying Unfulfilled Obligations with Guard Models