PGuard: A Native, Streaming, and Plug-in Guardrail for Multimodal Large Language Models

Summary

PGuard is a native, streaming guardrail that runs inside a multimodal LLM's backbone rather than as an external serving dependency. It uses dynamic layer gating over residual-stream representations to detect safety-relevant signals per token during prefill and decoding. It adds only 0.82-2.26% end-to-end overhead on Qwen3.5-122B-A10B served by SGLang, and on text queries with Qwen3.5-9B it reaches an average F1 of 0.836 across more than 30 benchmarks.

Related items

• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
• InfoTraceRouter++: Causal Semantic Routing Realignment via Optimal TransportSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoCrowdStrike to Acquire Dreadnode to Bring Automated AI Security Testing to the Falcon PlatformSimilar attack · CrowdStrike Blog