Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs
Summary
This paper argues that LLM safeguards based on copyable context cannot reliably ensure safety, presenting a safety trilemma among useful capability, reliable safety, and open access, and suggesting trusted credentials as a complementary mechanism.
View Cached Full Text
Cached at: 08/03/26, 05:30 AM
Paper page - Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs
Source: https://huggingface.co/papers/2607.27951
Abstract
Largelanguagemodelsafeguardsdecidewhethertoanswerbeforeseeinghowananswerwillbeused.Thiscreatesabasicproblemfordual-usetasks:thesameanswercanhelpanauthorizedprofessionaloranattacker,whileanattackercanimitateabenignrequestandinteractionhistory.Weseparatethecapabilityreleasedbythemodelfromtheevidenceavailableaboutdownstreamuse.Whenthatevidenceiscopyable,wederivetheexactworst-caseflooronattackerassistancewhilepreservingusefulanswers.Theresultyieldsasafetytrilemma:UsefulCapability,ReliableSafety,andOpenAccesscannotcoexist.Wethenshowhowatrustedcredentialcancomplementexistingsafeguardsbyaddinghard-to-copyinformationthatpredictsactualdownstreamuse,andidentifythestrongerconditionneededtoeliminatethefloor.Evidencefromdual-useevaluations,adaptiveattacks,anddeployedtrusted-accessprogramssupportsthepracticalrelevanceoftheseconditions.
View arXiv pageView PDFAdd to collection
Get this paper in your agent:
hf papers read 2607\.27951
Don’t have the latest CLI?curl \-LsSf https://hf\.co/cli/install\.sh \| bash
Models citing this paper0
No model linking this paper
Cite arxiv.org/abs/2607.27951 in a model README.md to link it from this page.
Datasets citing this paper0
No dataset linking this paper
Cite arxiv.org/abs/2607.27951 in a dataset README.md to link it from this page.
Spaces citing this paper0
No Space linking this paper
Cite arxiv.org/abs/2607.27951 in a Space README.md to link it from this page.
Collections including this paper0
No Collection including this paper
Add this paper to acollectionto link it from this page.
Similar Articles
Safety is Contextual, LLM-Judges Are Not: Navigating the Rigid Priors of Evaluators
This paper investigates the ability of LLMs-as-judges for safety to adapt to contextual information and varying safety definitions, finding that they are largely rigid and fail to adjust when the context contradicts their internal priors.
Coherent Context Can Silently Shift LLMs Into a Different Internal Regime — And Current Safety Systems Are Blind To It [D]
An independent researcher presents evidence that coherent context can shift LLMs into a different internal regime before producing output, bypassing surface-level safety filters. This suggests current alignment methods like RLHF may not be robust defenses.
Fidelity Is Not Safety: Gently-Compressed LLMs Pass Every Data-Free Quality Guard Yet Invent Procedure Steps in Agentic Execution
This paper shows that gently compressed LLMs can pass standard data-free quality guards (perplexity, MMLU, output fidelity) yet still invent procedure steps when used as agents, and proposes a data-free two-axis screen to detect such failures before deployment.
CR4T: Rewrite-Based Guardrails for Adolescent LLM Safety
This paper proposes CR4T, a model-agnostic safeguarding framework that rewrites unsafe or refusal-style LLM outputs into developmentally appropriate, guidance-oriented responses for adolescents, offering a more human-centered alternative to traditional refusal-centric guardrails.
SafeHarbor: Hierarchical Memory-Augmented Guardrail for LLM Agent Safety
SafeHarbor is a novel framework for LLM agent safety that uses hierarchical memory and self-evolution to balance safety and utility, achieving state-of-the-art performance on benign and malicious tasks.