arXiv: ADTGuard checks each token before release to detect harmful content during streaming

arXiv: ADTGuard checks each token before release to detect harmful content during streaming

The authors of ADTGuard argue that streaming responses can expose users to harmful content before moderation finishes. They identify two gaps: checks made after a response or chunk can come too late, while fixed-layer, token-level detection may miss safety signals and response-level labels do not mark when harmful content begins. Their proposed safeguard checks each token before release, combines safety evidence across layers and successive tokens through Depth-Time Safety Dynamics (DTSD), and uses a Causal Depth Router (CDR) to adapt which layers it observes. Risk-Onset Target Refinement (RTR) progressively builds token-level training targets from response-level labels. The authors report strong detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency. These are reported benchmark results; the abstract does not establish how the system performs in deployed settings. How does ADTGuard perform when integrated into real streaming systems, where latency and harmful-content exposure must both be measured?

Publication: b380ab76-1302-41ac-8b53-a1cdff357ec6

attribution — pass: The draft attributes the problem framing, method and benchmark results to the paper's authors ('The authors argue', 'The authors report'), consistent with the arXiv abstract. It presents none of these as established fact.

Authors:Chuming Wei, Churui Yang, Zihan Zhang, Ruien Li, Wusheng Zhang, Yan Zhang, Guangwen Yang

summary — pass: The title, summary and question follow the abstract's argument. Streaming can expose harmful content early, and the authors identify two gaps: late boundary moderation, and coarse labels plus fixed-layer readouts. The draft then describes the three components (DTSD, CDR, RTR) and the reported results. Terms such as token, layer and prefix are kept exactly and can be handled by tooltips. The closing caveat about deployment is phrased as an unknown, not a claim.

ADTGuard models risk across depth and time through Depth-Time Safety Dynamics (DTSD), which integrates safety evidence across layers at each token

date — pass: originalPublished 2026-10-27 matches the arXiv v1 submission date. The later feed timestamp is correctly not used.

[Submitted on 27 Oct 2026]

support — pass: Each claim is grounded in the abstract, including token-level checks before release, adaptive layer selection, RTR building token-level targets from response-level labels, and the 16M parameter and latency figures. The draft does not turn benchmark results into deployed reliability, and the limitations correctly note that benchmark details are missing.

With only response-level labels available, we further develop Risk-Onset Target Refinement (RTR) to progressively construct token-level training targets for both components.

media — pass: The selected media is the verified arXiv abstract page, which is the direct original source. It matches the source URL and the decision's mediaId.