Reflex-Guard: A Low-Latency Guardrail for LLM Prompt Safety Using Dense Semantic Embeddings

arXiv:2608.17556 · cs.CR, cs.CL, cs.LG · Submitted 2026-08-18 · Read on arXiv

cs.CR, cs.CL, cs.LG

Submitted: 2026-08-18

Updated: 2026-09-24

Code: https://github.com/tatsu-lab/alpaca_eval

Terminology

• Embeddings — 35× in this paper · explained in 2 episodes
• Robustness — 9× in this paper · explained in 5 episodes
• F1 Score — 8× in this paper · explained in 3 episodes
• Accuracy — 7× in this paper · explained in 1 episode
• Transformer — 7× in this paper · explained in 2 episodes
• AUC — 5× in this paper · explained in 2 episodes
• Benchmark — 5× in this paper · explained in 2 episodes
• Alignment — 4× in this paper · explained in 1 episode
• Reflex Efficiency Score — 4× in this paper
• Adversarial Attacks — 2× in this paper · explained in 1 episode
• Benchmarking — 2× in this paper · explained in 3 episodes
• Calibration — 2× in this paper · explained in 7 episodes
• Contrastive Learning — 2× in this paper · explained in 5 episodes
• Feature Engineering — 2× in this paper · explained in 3 episodes
• Semantic Similarity — 2× in this paper · explained in 2 episodes
• Adversarial Robustness — 1× in this paper · explained in 3 episodes
• Clustering — 1× in this paper · explained in 2 episodes
• Core — 1× in this paper · explained in 2 episodes
• Cosine Similarity — 1× in this paper · explained in 3 episodes
• Decode — 1× in this paper · explained in 2 episodes
• Distillation — 1× in this paper · explained in 2 episodes
• Edge Deployment — 1× in this paper · explained in 2 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 7 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Greedy Coordinate Gradient — 1× in this paper
• Interpretability — 1× in this paper · explained in 15 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• Prompt Engineering — 1× in this paper · explained in 4 episodes
• Quantization — 1× in this paper · explained in 12 episodes
• Reinforcement Learning — 1× in this paper · explained in 4 episodes

Sources

• Llama 2: Open Foundation and Fine-Tuned Chat Models
• Universal and Transferable Adversarial Attacks on Aligned Language Models
• Performance Portable Monte Carlo Particle Transport on Intel, NVIDIA, and AMD GPUs
• Homoclinic Floer homology via direct limits
• High spin axion insulator
• Distributionally Robust Receive Combining
• SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding
• Constitutional AI: Harmlessness from AI Feedback
• Flux density monitoring of 89 millisecond pulsars with MeerKAT
• Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations
• From Spectral Theorem to Statistical Independence with Application to System Identification
• Moore-Read state in Half-filled Moir'e Chern band from three-body Pseudo-potential
• Ellipsephic harmonic series revisited
• Prompt Injection attack against LLM-integrated Applications
• Text Embeddings by Weakly-Supervised Contrastive Pre-training
• Subwavelength Imaging using a Solid-Immersion Diffractive Optical Processor

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs