Pith. sign in

REVIEW 12 cited by

Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversations

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2411.17713 v1 pith:WILDKNTL submitted 2024-11-18 cs.DC cs.AI

Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversations

classification cs.DC cs.AI
keywords guardllamab-int4compactefficientachievingandroidapproximately
verification ladder T0 review T1 audit T2 compute T3 formal T4 reserved
0 comments
read the original abstract

This paper presents Llama Guard 3-1B-INT4, a compact and efficient Llama Guard model, which has been open-sourced to the community during Meta Connect 2024. We demonstrate that Llama Guard 3-1B-INT4 can be deployed on resource-constrained devices, achieving a throughput of at least 30 tokens per second and a time-to-first-token of 2.5 seconds or less on a commodity Android mobile CPU. Notably, our experiments show that Llama Guard 3-1B-INT4 attains comparable or superior safety moderation scores to its larger counterpart, Llama Guard 3-1B, despite being approximately 7 times smaller in size (440MB).

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Forward citations

Cited by 12 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score.

  1. When Search Goes Wrong: Red-Teaming Web-Augmented Large Language Models

    cs.CR 2025-10 unverdicted novelty 7.0

    CREST-Search is a red-teaming framework that crafts seemingly benign search queries to induce unsafe citations from web-augmented LLMs, backed by a new WebSearch-Harm dataset for fine-tuning a specialized attacker model.

  2. When Are Sparse Feature Interventions Actually Localized? Matched Evaluation for SAE-Based Safety Control

    cs.AI 2026-07 conditional novelty 6.5

    SAE safety ablations are regime-dependent and baseline-dependent: medium-k heads can look efficient, but surface-matched dense steering often beats them and high-k collapses coherence.

  3. RecurGuard: Runtime Monitoring for Reasoning-Token Consumption Attacks

    cs.CR 2026-06 unverdicted novelty 6.0

    RecurGuard monitors recurrence rate, volume growth, and query progress in exposed reasoning traces to terminate generation on token-consumption attacks, reporting 99% detection on OverThink and 92% on ExtendAttack wit...

  4. LPG: Balancing Efficiency and Policy Reasoning in Latent Policy Guardrails

    cs.CR 2026-05 conditional novelty 6.0

    LPG compresses policy deliberation into 10 latent tokens to reach 84.5% safety accuracy and 11x speedup over explicit reasoning baselines on guardrail benchmarks.

  5. To Lie or Not to Lie? Investigating The Biased Spread of Global Lies by LLMs

    cs.CL 2026-04 unverdicted novelty 6.0

    LLMs propagate misinformation more in lower-resource languages and lower-HDI countries, with input safety classifiers and retrieval-augmented fact-checking showing cross-lingual and regional gaps.

  6. MobileLLM-Flash: Latency-Guided On-Device LLM Design for Industry Scale Deployment

    cs.LG 2026-03 unverdicted novelty 6.0

    MobileLLM-Flash creates 350M-1.4B parameter LLMs via latency-guided search and attention skipping, delivering up to 1.8x faster prefill and 1.6x faster decode on mobile CPUs with comparable or better quality.

  7. Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs

    cs.CL 2025-11 unverdicted novelty 6.0

    EvoSynth evolves code-based jailbreak algorithms via multi-agent self-correction, reaching 85.5% ASR on Claude-Sonnet-4.5 and 95.9% average across targets with greater diversity.

  8. MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation

    cs.CR 2025-10 conditional novelty 6.0

    Special tokens that structure LLM conversations can be injected and swapped for lookalike words to bypass both built-in safety and external content filters.

  9. Attention Misses Visual Risk: Risk-Adaptive Steering for Multimodal Safety Alignment

    cs.CV 2025-10 conditional novelty 5.0

    Risk-adaptive activation steering, guided by a prototype-similarity risk score computed on the first three response tokens, substantially reduces multimodal jailbreak success rates across four MLLMs while preserving utility.

  10. Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats

    cs.CR 2026-06 unverdicted novelty 4.0

    A joint prompt-response verification framework using intent analysts, harm analysts, and a judge improves average F1 to 0.95 and cuts attack success rate to 4.1% across jailbreaks, prompt injection, phishing, cyber ab...

  11. Distilling Safe LLM Systems via Soft Prompts for On Device Settings

    cs.LG 2026-06 unverdicted novelty 4.0

    Soft prompt distillation with total variation and KL divergence transfers safety behaviors from guard models to on-device LLMs and outperforms LoRA adapters, steering vectors, and direct optimization in safety-usefuln...

  12. Compliance-Scored Best-of-N Guardrail Orchestration for Multimodal Document Generation in Payments Dispute Defense

    cs.DC 2026-06 unverdicted novelty 3.0

    A compliance-scored best-of-N orchestration layer for multimodal document generation reports 91% compliance at 5 attempts in 20 seconds and +11 percentage point win rate gains in aggregate operational data for payment...