{"id":"e727375eb3f59be51b55e44d9d4b22dd9b80191bd504c6adece65220f9800296","title":"arXiv: ADTGuard checks each token before release to detect harmful content during streaming","argument":"The authors of ADTGuard argue that streaming responses can expose users to harmful content before moderation finishes. They identify two gaps: checks made after a response or chunk can come too late, while fixed-layer, token-level detection may miss safety signals and response-level labels do not mark when harmful content begins.\n\nTheir proposed safeguard checks each token before release, combines safety evidence across layers and successive tokens through Depth-Time Safety Dynamics (DTSD), and uses a Causal Depth Router (CDR) to adapt which layers it observes. Risk-Onset Target Refinement (RTR) progressively builds token-level training targets from response-level labels.\n\nThe authors report strong detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency. These are reported benchmark results; the abstract does not establish how the system performs in deployed settings. How does ADTGuard perform when integrated into real streaming systems, where latency and harmful-content exposure must both be measured?","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The evidence is the arXiv abstract; it does not provide benchmark names, detailed results, or the comparison conditions. The abstract reports benchmark performance but does not establish performance in deployed streaming systems or quantify harmful-content exposure there.","speaker":{"name":"Wei, Chuming, Yang, Churui, Zhang, Zihan, Li, Ruien, Zhang, Wusheng, Zhang, Yan, Yang, Guangwen","roleAtSource":"Article author"},"source":{"title":"ADTGuard: Adaptive Depth-Time Safeguard for Streaming Inference in Large Language Models","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2610.36574","publishedAt":"2026-10-27","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors say streaming can expose users to harmful content before generation and verification are complete.","excerpt":"streaming may expose users to harmful content before generation is complete","url":"https://arxiv.org/abs/2610.36574","relationship":"Source-stated"},{"text":"The authors identify delayed response- or chunk-level moderation and limits in fixed-layer detection trained on response-level labels as problems.","excerpt":"post-hoc moderation at response or chunk boundaries delays intervention","url":"https://arxiv.org/abs/2610.36574","relationship":"Source-stated"},{"text":"ADTGuard checks each token before release, models safety evidence over layers and tokens, and adapts layer selection to the current prefix.","excerpt":"checks each token before release, progressively refines token-level training targets, and adapts layer selection to the current prefix","url":"https://arxiv.org/abs/2610.36574","relationship":"Source-stated"},{"text":"The authors report strong streaming detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency.","excerpt":"matching or surpassing state-of-the-art safeguards while requiring only 16M trainable parameters and maintaining competitive per-token latency","url":"https://arxiv.org/abs/2610.36574","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2610.36574","checkedAt":"2026-10-31T00:40:35.819Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How does ADTGuard perform in real streaming systems, where latency and harmful-content exposure can be measured together?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv: ADTGuard checks each token before release to detect harmful content during streaming","summary":"The authors of ADTGuard argue that streaming responses can expose users to harmful content before moderation finishes. They identify two gaps: checks made after a response or chunk can come too late, while fixed-layer, token-level detection may miss safety signals and response-level labels do not mark when harmful content begins.\n\nTheir proposed safeguard checks each token before release, combines safety evidence across layers and successive tokens through Depth-Time Safety Dynamics (DTSD), and uses a Causal Depth Router (CDR) to adapt which layers it observes. Risk-Onset Target Refinement (RTR) progressively builds token-level training targets from response-level labels.\n\nThe authors report strong detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency. These are reported benchmark results; the abstract does not establish how the system performs in deployed settings. How does ADTGuard perform when integrated into real streaming systems, where latency and harmful-content exposure must both be measured?","question":"How does ADTGuard perform in real streaming systems, where latency and harmful-content exposure can be measured together?","claims":[{"text":"The authors say streaming can expose users to harmful content before generation and verification are complete.","excerpt":"streaming may expose users to harmful content before generation is complete","support":"source-stated"},{"text":"The authors identify delayed response- or chunk-level moderation and limits in fixed-layer detection trained on response-level labels as problems.","excerpt":"post-hoc moderation at response or chunk boundaries delays intervention","support":"source-stated"},{"text":"ADTGuard checks each token before release, models safety evidence over layers and tokens, and adapts layer selection to the current prefix.","excerpt":"checks each token before release, progressively refines token-level training targets, and adapts layer selection to the current prefix","support":"source-stated"},{"text":"The authors report strong streaming detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency.","excerpt":"matching or surpassing state-of-the-art safeguards while requiring only 16M trainable parameters and maintaining competitive per-token latency","support":"source-stated"}],"limitations":["The evidence is the arXiv abstract; it does not provide benchmark names, detailed results, or the comparison conditions.","The abstract reports benchmark performance but does not establish performance in deployed streaming systems or quantify harmful-content exposure there."],"mediaId":"b122ee2a8d45ef3c954122c2384ed1c2805a85d49186a29642f08f078293836c","correctionReason":null,"id":"e727375eb3f59be51b55e44d9d4b22dd9b80191bd504c6adece65220f9800296","publicationId":"b380ab76-1302-41ac-8b53-a1cdff357ec6","version":1,"sourceUrl":"https://arxiv.org/abs/2610.36574","sourceTitle":"ADTGuard: Adaptive Depth-Time Safeguard for Streaming Inference in Large Language Models","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-10-27","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-10-28T08:10:32.556Z","createdAt":"2026-10-30T22:33:27.996Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"b122ee2a8d45ef3c954122c2384ed1c2805a85d49186a29642f08f078293836c","kind":"article","url":"https://arxiv.org/abs/2610.36574","sourceUrl":"https://arxiv.org/abs/2610.36574","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-10-30T22:32:27.261Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2610.36574","checkedAt":"2026-10-31T00:40:35.819Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"b122ee2a8d45ef3c954122c2384ed1c2805a85d49186a29642f08f078293836c","confidence":0.86,"provider":"typesafe","model":"jev-1.13.0","inputHash":"6c2dd114ca756b2ee9be74d911bd94d4a67d76af50ee2a67048274cf42fbb588","decidedAt":"2026-10-30T22:32:28.873Z"},"provenance":{"textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observationId":"828ab87515cd80add8558b44b3d2e021d3e0f5344dd20c6e1d0af3a5c25e10a3","retrievedAt":"2026-10-30T22:32:26.720Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"296c5834-402c-494b-8751-e815729271db"},"reviewer":{"model":"gpt-6-luna","runId":"06218bf2-c467-4667-8097-afae87a1fbb9"}},"audit":{"status":"passed","reviewedAt":"2026-10-30T22:33:27.996Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Wei, Chuming","url":null,"kind":"unknown"},{"name":"Yang, Churui","url":null,"kind":"unknown"},{"name":"Zhang, Zihan","url":null,"kind":"unknown"},{"name":"Li, Ruien","url":null,"kind":"unknown"},{"name":"Zhang, Wusheng","url":null,"kind":"unknown"},{"name":"Zhang, Yan","url":null,"kind":"unknown"},{"name":"Yang, Guangwen","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Wei, Chuming","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Wei, Chuming","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Yang, Churui","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Yang, Churui","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Zhang, Zihan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Zhang, Zihan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Li, Ruien","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Li, Ruien","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Zhang, Wusheng","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Zhang, Wusheng","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:4","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Zhang, Yan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Zhang, Yan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:5","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Yang, Guangwen","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Yang, Guangwen","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:6","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}}],"participationCoverage":{"total":7,"returned":7,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2610.36574","snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z","basis":"publisher-page-metadata","sourceLinks":45,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/e727375eb3f59be51b55e44d9d4b22dd9b80191bd504c6adece65220f9800296/source"}},"canonicalUrl":"https://escapemeridian.com/readings/arxiv-adtguard-checks-each-token-before-release-to-detect-e727375e","formats":{"html":"/readings/arxiv-adtguard-checks-each-token-before-release-to-detect-e727375e","markdown":"/readings/arxiv-adtguard-checks-each-token-before-release-to-detect-e727375e.md","json":"/readings/arxiv-adtguard-checks-each-token-before-release-to-detect-e727375e.json"},"attribution":"Headline and summary by Escape Meridian, prepared by Luna from the attributed source. A source check is not independent confirmation of the source’s claims.","readerContext":{"version":"reader-context-v1","attribution":"Reference context selected by Escape Meridian; separate from source evidence. Entity mentions do not establish authorship, involvement or endorsement.","terms":[{"id":"term-benchmark","name":"Benchmark","explanation":"A defined set of tests used to compare systems. Results depend on the tasks and measures selected.","referenceUrl":"https://arxiv.org/abs/2211.09110"},{"id":"term-latency","name":"Latency","explanation":"The delay between sending a request and receiving the result.","referenceUrl":"https://developers.google.com/machine-learning/glossary#latency"}],"entities":[{"id":"arxiv","name":"arXiv","kind":"organization","context":"arXiv is a research manuscript repository where authors share papers that may not yet have been peer reviewed.","referenceUrls":["https://arxiv.org/","https://info.arxiv.org/help/api/index.html"],"path":"/entities/arxiv","json":"/entities/arxiv.json","markdown":"/entities/arxiv.md"}]},"researchQuestions":[],"withdrawn":false,"references":{"schemaVersion":1,"target":{"type":"reading","id":"e727375eb3f59be51b55e44d9d4b22dd9b80191bd504c6adece65220f9800296","revision":"b380ab76-1302-41ac-8b53-a1cdff357ec6","revisionKind":"publication-id","title":"arXiv: ADTGuard checks each token before release to detect harmful content during streaming","url":"https://escapemeridian.com/readings/arxiv-adtguard-checks-each-token-before-release-to-detect-e727375e"},"source":{"type":"source","id":"https://arxiv.org/abs/2610.36574","revision":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","revisionKind":"sha256-source-text","title":"ADTGuard: Adaptive Depth-Time Safeguard for Streaming Inference in Large Language Models","url":"https://arxiv.org/abs/2610.36574"},"status":"available","items":[],"next":null,"scope":"Explicit citations in public readings and public file attachments to this reading. Shared topics are not citations. Other artifact types need an explicit reference adapter."},"revisions":[{"id":"e727375eb3f59be51b55e44d9d4b22dd9b80191bd504c6adece65220f9800296","title":"arXiv: ADTGuard checks each token before release to detect harmful content during streaming","argument":"The authors of ADTGuard argue that streaming responses can expose users to harmful content before moderation finishes. They identify two gaps: checks made after a response or chunk can come too late, while fixed-layer, token-level detection may miss safety signals and response-level labels do not mark when harmful content begins.\n\nTheir proposed safeguard checks each token before release, combines safety evidence across layers and successive tokens through Depth-Time Safety Dynamics (DTSD), and uses a Causal Depth Router (CDR) to adapt which layers it observes. Risk-Onset Target Refinement (RTR) progressively builds token-level training targets from response-level labels.\n\nThe authors report strong detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency. These are reported benchmark results; the abstract does not establish how the system performs in deployed settings. How does ADTGuard perform when integrated into real streaming systems, where latency and harmful-content exposure must both be measured?","topicIds":["intelligence-and-discovery"],"domain":"science","claimType":"attributed reading","limits":"The evidence is the arXiv abstract; it does not provide benchmark names, detailed results, or the comparison conditions. The abstract reports benchmark performance but does not establish performance in deployed streaming systems or quantify harmful-content exposure there.","speaker":{"name":"Wei, Chuming, Yang, Churui, Zhang, Zihan, Li, Ruien, Zhang, Wusheng, Zhang, Yan, Yang, Guangwen","roleAtSource":"Article author"},"source":{"title":"ADTGuard: Adaptive Depth-Time Safeguard for Streaming Inference in Large Language Models","publisher":"arXiv cs.AI","format":"Article","url":"https://arxiv.org/abs/2610.36574","publishedAt":"2026-10-27","dateBasis":"Date basis not provided."},"evidence":[{"text":"The authors say streaming can expose users to harmful content before generation and verification are complete.","excerpt":"streaming may expose users to harmful content before generation is complete","url":"https://arxiv.org/abs/2610.36574","relationship":"Source-stated"},{"text":"The authors identify delayed response- or chunk-level moderation and limits in fixed-layer detection trained on response-level labels as problems.","excerpt":"post-hoc moderation at response or chunk boundaries delays intervention","url":"https://arxiv.org/abs/2610.36574","relationship":"Source-stated"},{"text":"ADTGuard checks each token before release, models safety evidence over layers and tokens, and adapts layer selection to the current prefix.","excerpt":"checks each token before release, progressively refines token-level training targets, and adapts layer selection to the current prefix","url":"https://arxiv.org/abs/2610.36574","relationship":"Source-stated"},{"text":"The authors report strong streaming detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency.","excerpt":"matching or surpassing state-of-the-art safeguards while requiring only 16M trainable parameters and maintaining competitive per-token latency","url":"https://arxiv.org/abs/2610.36574","relationship":"Source-stated"}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2610.36574","checkedAt":"2026-10-31T00:40:35.819Z","items":[],"note":"No suitable media was found by the supported page extraction."},"assumptions":[],"openQuestion":{"attribution":"Open question","text":"How does ADTGuard perform in real streaming systems, where latency and harmful-content exposure can be measured together?"},"whatWouldChangeView":{"attribution":"Change condition not recorded","text":""},"editorialComparisons":[],"live":{"title":"arXiv: ADTGuard checks each token before release to detect harmful content during streaming","summary":"The authors of ADTGuard argue that streaming responses can expose users to harmful content before moderation finishes. They identify two gaps: checks made after a response or chunk can come too late, while fixed-layer, token-level detection may miss safety signals and response-level labels do not mark when harmful content begins.\n\nTheir proposed safeguard checks each token before release, combines safety evidence across layers and successive tokens through Depth-Time Safety Dynamics (DTSD), and uses a Causal Depth Router (CDR) to adapt which layers it observes. Risk-Onset Target Refinement (RTR) progressively builds token-level training targets from response-level labels.\n\nThe authors report strong detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency. These are reported benchmark results; the abstract does not establish how the system performs in deployed settings. How does ADTGuard perform when integrated into real streaming systems, where latency and harmful-content exposure must both be measured?","question":"How does ADTGuard perform in real streaming systems, where latency and harmful-content exposure can be measured together?","claims":[{"text":"The authors say streaming can expose users to harmful content before generation and verification are complete.","excerpt":"streaming may expose users to harmful content before generation is complete","support":"source-stated"},{"text":"The authors identify delayed response- or chunk-level moderation and limits in fixed-layer detection trained on response-level labels as problems.","excerpt":"post-hoc moderation at response or chunk boundaries delays intervention","support":"source-stated"},{"text":"ADTGuard checks each token before release, models safety evidence over layers and tokens, and adapts layer selection to the current prefix.","excerpt":"checks each token before release, progressively refines token-level training targets, and adapts layer selection to the current prefix","support":"source-stated"},{"text":"The authors report strong streaming detection across multiple safety benchmarks, matching or surpassing state-of-the-art safeguards with 16M trainable parameters and competitive per-token latency.","excerpt":"matching or surpassing state-of-the-art safeguards while requiring only 16M trainable parameters and maintaining competitive per-token latency","support":"source-stated"}],"limitations":["The evidence is the arXiv abstract; it does not provide benchmark names, detailed results, or the comparison conditions.","The abstract reports benchmark performance but does not establish performance in deployed streaming systems or quantify harmful-content exposure there."],"mediaId":"b122ee2a8d45ef3c954122c2384ed1c2805a85d49186a29642f08f078293836c","correctionReason":null,"id":"e727375eb3f59be51b55e44d9d4b22dd9b80191bd504c6adece65220f9800296","publicationId":"b380ab76-1302-41ac-8b53-a1cdff357ec6","version":1,"sourceUrl":"https://arxiv.org/abs/2610.36574","sourceTitle":"ADTGuard: Adaptive Depth-Time Safeguard for Streaming Inference in Large Language Models","publisher":"arXiv cs.AI","publishedAt":null,"originalPublished":{"value":"2026-10-27","precision":"day","basis":"publisher_citation_date"},"firstObservedAt":"2026-10-28T08:10:32.556Z","createdAt":"2026-10-30T22:33:27.996Z","historical":true,"entityIds":["arxiv"],"topicIds":["intelligence-and-discovery"],"media":[{"id":"b122ee2a8d45ef3c954122c2384ed1c2805a85d49186a29642f08f078293836c","kind":"article","url":"https://arxiv.org/abs/2610.36574","sourceUrl":"https://arxiv.org/abs/2610.36574","label":"Read original","provenance":"source_link","verification":{"status":"verified","checkedAt":"2026-10-30T22:32:27.261Z","method":"acquired_source","contentType":"text/html"},"recommendationReason":"Recommended by Jev for understanding this source; checked by Luna."}],"sourceMedia":{"status":"not_found","sourceUrl":"https://arxiv.org/abs/2610.36574","checkedAt":"2026-10-31T00:40:35.819Z","items":[],"note":"No suitable media was found by the supported page extraction."},"editorialDecision":{"outcome":"accept","reasonCodes":["material_development"],"rubricVersion":"stream-admission-v5","mediaId":"b122ee2a8d45ef3c954122c2384ed1c2805a85d49186a29642f08f078293836c","confidence":0.86,"provider":"typesafe","model":"jev-1.13.0","inputHash":"6c2dd114ca756b2ee9be74d911bd94d4a67d76af50ee2a67048274cf42fbb588","decidedAt":"2026-10-30T22:32:28.873Z"},"provenance":{"textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observationId":"828ab87515cd80add8558b44b3d2e021d3e0f5344dd20c6e1d0af3a5c25e10a3","retrievedAt":"2026-10-30T22:32:26.720Z","kind":"publisher-page","preparer":{"model":"gpt-6-luna","runId":"296c5834-402c-494b-8751-e815729271db"},"reviewer":{"model":"gpt-6-luna","runId":"06218bf2-c467-4667-8097-afae87a1fbb9"}},"audit":{"status":"passed","reviewedAt":"2026-10-30T22:33:27.996Z","model":"anthropic/claude-opus-5.5"},"sourceAttribution":{"authors":[{"name":"Wei, Chuming","url":null,"kind":"unknown"},{"name":"Yang, Churui","url":null,"kind":"unknown"},{"name":"Zhang, Zihan","url":null,"kind":"unknown"},{"name":"Li, Ruien","url":null,"kind":"unknown"},{"name":"Zhang, Wusheng","url":null,"kind":"unknown"},{"name":"Zhang, Yan","url":null,"kind":"unknown"},{"name":"Yang, Guangwen","url":null,"kind":"unknown"}],"authorRole":"article-author","hosts":[],"status":"stated","authorRoster":{"truncated":false,"omitted":0,"assertionGroupsOmitted":0},"participation":[{"actor":{"name":"Wei, Chuming","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Wei, Chuming","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:0","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Yang, Churui","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Yang, Churui","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:1","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Zhang, Zihan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Zhang, Zihan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:2","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Li, Ruien","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Li, Ruien","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:3","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Zhang, Wusheng","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Zhang, Wusheng","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:4","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Zhang, Yan","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Zhang, Yan","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:5","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}},{"actor":{"name":"Yang, Guangwen","url":null,"kind":"unknown","actorId":null},"role":"author","scope":{"kind":"work-credit","locator":null},"literalCredit":"Yang, Guangwen","status":"stated","provenance":{"basis":"head-meta","sourceUrl":"https://arxiv.org/abs/2610.36574","locator":"head/meta[name=author|citation_author]"},"assertionId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a:participation:6","identity":{"version":"entity-identity-v1","status":"unresolved","actorId":null,"canonicalActorId":null,"candidateActorIds":[],"assertions":[],"sourceObservedAt":"2026-10-31T00:40:35.819Z","knowledgeAsOf":null},"sourceVersion":{"snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","sourceUrl":"https://arxiv.org/abs/2610.36574","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z"}}],"participationCoverage":{"total":7,"returned":7,"complete":true,"fullAssertions":"source-metadata-endpoint"},"distribution":null,"publisher":null,"sourceUrl":"https://arxiv.org/abs/2610.36574","snapshotId":"159c2bf28361e6476e6e7b5103195a409ae659a50ffd0e84b12d59d33154fd6a","contentSha256":"583e74faa18eef86832c101a223803b24c6b75c0c1a563f7adeca353f1eb3934","textHash":"9a0a122ad060b4d519c2a4cf77005f23713537bd2cb7efa95006bab79cd16a75","observedAt":"2026-10-31T00:40:35.819Z","basis":"publisher-page-metadata","sourceLinks":45,"linksTruncated":false,"metadataUrl":"/api/pipeline/stream/e727375eb3f59be51b55e44d9d4b22dd9b80191bd504c6adece65220f9800296/source"}}}],"audits":[{"publicationId":"b380ab76-1302-41ac-8b53-a1cdff357ec6","verdict":"passed","findings":[{"dimension":"attribution","status":"pass","explanation":"The draft attributes the problem framing, method and benchmark results to the paper's authors ('The authors argue', 'The authors report'), consistent with the arXiv abstract. It presents none of these as established fact.","excerpt":"Authors:Chuming Wei, Churui Yang, Zihan Zhang, Ruien Li, Wusheng Zhang, Yan Zhang, Guangwen Yang"},{"dimension":"summary","status":"pass","explanation":"The title, summary and question follow the abstract's argument. Streaming can expose harmful content early, and the authors identify two gaps: late boundary moderation, and coarse labels plus fixed-layer readouts. The draft then describes the three components (DTSD, CDR, RTR) and the reported results. Terms such as token, layer and prefix are kept exactly and can be handled by tooltips. The closing caveat about deployment is phrased as an unknown, not a claim.","excerpt":"ADTGuard models risk across depth and time through Depth-Time Safety Dynamics (DTSD), which integrates safety evidence across layers at each token"},{"dimension":"date","status":"pass","explanation":"originalPublished 2026-10-27 matches the arXiv v1 submission date. The later feed timestamp is correctly not used.","excerpt":"[Submitted on 27 Oct 2026]"},{"dimension":"support","status":"pass","explanation":"Each claim is grounded in the abstract, including token-level checks before release, adaptive layer selection, RTR building token-level targets from response-level labels, and the 16M parameter and latency figures. The draft does not turn benchmark results into deployed reliability, and the limitations correctly note that benchmark details are missing.","excerpt":"With only response-level labels available, we further develop Risk-Onset Target Refinement (RTR) to progressively construct token-level training targets for both components."},{"dimension":"media","status":"pass","explanation":"The selected media is the verified arXiv abstract page, which is the direct original source. It matches the source URL and the decision's mediaId.","excerpt":null}],"createdAt":"2026-10-30T22:33:27.996Z","model":"anthropic/claude-opus-5.5"}],"correctionUrl":"https://escapemeridian.com/corrections/"}