HaloGuard 2.0: An Open-Weights Constitutional Output Guard for Multilingual Response Safety
Read the original on arXiv Computation and Language →HaloGuard 2.0 is an open‑weight, streaming output guard that assigns a safe/unsafe probability to each response token in a single forward pass, allowing deployments to halt a stream once harm is detected. It builds on HaloGuard 1.0’s input‑guard constitution, training on a 478,532‑response corpus and a second corrective phase with 106,043 counterfactual responses to address a shortcut that previously caused the model to judge prompts instead of responses. The resulting 0.8 B‑parameter model achieves an 83.6 macro F1 on six English safety benchmarks—up 10.8 points over the prior version—while using 5–10× fewer parameters than the strongest full‑response guards, and its multilingual variant reaches 83.1 F1 across 17 languages.
Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Computation and Language.