让大模型安全防护更透明可解释,还能灵活调整策略。
YuFeng-XGuard: A Reasoning-Centric, Interpretable, and Flexible Guardrail Model for Large Language Models
- 基于多维度推理生成风险分类与解释,拒绝黑箱判断。
- 首词即决策,解释按需展开,兼顾速度与深度。
- 支持不重训练调整安全策略,适合真实场景部署。
随着大语言模型在现实应用中广泛部署,安全防护机制需超越粗粒度过滤,实现细粒度、可解释且可适应的风险评估。现有方法多依赖快速分类或事后规则,存在透明度低、策略僵化或推理成本高的问题。为此,我们提出 YuFeng-XGuard,一个以推理为核心的防护模型家族,支持对大模型交互进行多维风险感知。该模型不输出模糊的二元判断,而是生成结构化风险预测,包含明确的风险类别、可配置置信度及自然语言解释,揭示决策依据。为平衡延迟与解释深度,采用分层推理机制:基于首个解码词完成初步风险判断,必要时按需展开解释性推理。此外,引入动态策略机制,将风险感知与策略执行解耦,实现无需重训练即可调整安全策略。在多个公开安全基准上的实验证明,YuFeng-XGuard 在保持高效-有效权衡的同时达到领先性能。我们开源了该模型家族,包含全量版与轻量版,支持多样部署场景。
原文摘要 · Abstract (English)
As large language models (LLMs) are increasingly deployed in real-world applications, safety guardrails are required to go beyond coarse-grained filtering and support fine-grained, interpretable, and adaptable risk assessment. However, existing solutions often rely on rapid classification schemes or post-hoc rules, resulting in limited transparency, inflexible policies, or prohibitive inference costs. To this end, we present YuFeng-XGuard, a reasoning-centric guardrail model family designed to perform multi-dimensional risk perception for LLM interactions. Instead of producing opaque binary judgments, YuFeng-XGuard generates structured risk predictions, including explicit risk categories and configurable confidence scores, accompanied by natural language explanations that expose the underlying reasoning process. This formulation enables safety decisions that are both actionable and interpretable. To balance decision latency and explanatory depth, we adopt a tiered inference paradigm that performs an initial risk decision based on the first decoded token, while preserving ondemand explanatory reasoning when required. In addition, we introduce a dynamic policy mechanism that decouples risk perception from policy enforcement, allowing safety policies to be adjusted without model retraining. Extensive experiments on a diverse set of public safety benchmarks demonstrate that YuFeng-XGuard achieves stateof-the-art performance while maintaining strong efficiency-efficacy trade-offs. We release YuFeng-XGuard as an open model family, including both a full-capacity variant and a lightweight version, to support a wide range of deployment scenarios.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。