arXiv AI By William Hackett, Peter Garraghan

BRANCH: Bypassing Multi-Scanner AI Guardrails

Read the original on arXiv AI →

The paper introduces BRANCH, a method that bypasses multi-scanner AI guardrail systems by using a branching tree search to apply adversarial perturbations to individual scanners and optimizing across all scanners. BRANCH achieves a 100% attack success rate across six guardrail systems in 120 scenarios, using 72% fewer queries and 4.5× less wall‑clock time than existing techniques while preserving semantic meaning. The approach also transfers to 29 unseen guardrails, including eight commercial black‑box systems, sometimes reaching 100% success without further optimization.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv AI
Sep 7

Robust and Efficient Guardrails with Latent Reasoning

The paper introduces COLAGUARD, a guardrail model that embeds multi-step safety reasoning into a continuous latent space, allowing efficient hidden-state propagation during inference. Compared to existing methods, COLAGUARD achieves an 8.24‑point macro‑F1 improvement over Llama Guard 3 and matches the explicit reasoning baseline GuardReasoner, while delivering a 12.9× speedup and a 22.4× reduction in token usage across ten moderation settings and eight safety benchmarks.

By Siddharth Sai, Xiaofei Wen, Muhao Chen
Hugging Face Trending Papers
Jul 13

SingGuard-NSFA: Extensible Guardrails for Agentic AI via Generative Reasoning and Real-Time Classification

We present nsfaguard, a guardrail framework for securing agentic AI systems against operational threats, such as prompt injection, sensitive information extraction, malicious code requests, dangerous tool misuse, and resource exhaustion. We first introduce the NSFA taxonomy, which organizes 185 risk variants into a CIA-triad-grounded hierarchy and is cross-validated against three well-established OWASP guidelines.