Llama Guard

Llama 2-7B base: Small enough to run inline with a main generative model while handling both prompt- and response-level safety classification.

Customizable taxonomy: The safety taxonomy is specified in the instruction prompt itself, so operators can adapt it to their use case without retraining.

Zero-shot and few-shot: Works off the shelf for many taxonomies in zero- or few-shot mode, and can be fine-tuned on a specific policy dataset when needed.

Open release: Ships as an open model, filling a gap for teams that want local, auditable safety classification rather than relying solely on API-side moderation.