{"id":"https://openalex.org/W7133488552","doi":"https://doi.org/10.48550/arxiv.2603.02635","title":"SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safety","display_name":"SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safety","publication_year":2026,"publication_date":"2026-03-03","ids":{"openalex":"https://openalex.org/W7133488552","doi":"https://doi.org/10.48550/arxiv.2603.02635"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.02635","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.02635","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.02635","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100580407","display_name":"Zixuan Xu","orcid":"https://orcid.org/0009-0001-5877-9681"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Zixuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128058946","display_name":"Tiancheng He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Tiancheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060429045","display_name":"Huahui Yi","orcid":"https://orcid.org/0009-0007-9361-5491"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yi, Huahui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128120948","display_name":"Kun Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Kun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128078939","display_name":"Xi Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Xi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111319801","display_name":"Gongli Xi","orcid":"https://orcid.org/0009-0008-3702-3667"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xi, Gongli","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128108199","display_name":"Qiankun Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Qiankun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128044099","display_name":"Kang Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Kang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128115582","display_name":"Yang Liu","orcid":"https://orcid.org/0009-0007-1986-7025"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5125357296","display_name":"Zhigang Zeng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zeng, Zhigang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.7006000280380249,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.7006000280380249,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.03709999844431877,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10525","display_name":"Human-Automation Interaction and Safety","score":0.034299999475479126,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.520799994468689},{"id":"https://openalex.org/keywords/planner","display_name":"Planner","score":0.501800000667572},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.39469999074935913},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.3781999945640564},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.3644999861717224},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.3483999967575073},{"id":"https://openalex.org/keywords/protocol-analysis","display_name":"Protocol analysis","score":0.3334999978542328},{"id":"https://openalex.org/keywords/multimodality","display_name":"Multimodality","score":0.33329999446868896},{"id":"https://openalex.org/keywords/conjunction","display_name":"Conjunction (astronomy)","score":0.3312000036239624}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6754999756813049},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.520799994468689},{"id":"https://openalex.org/C2776999362","wikidata":"https://www.wikidata.org/wiki/Q2349274","display_name":"Planner","level":2,"score":0.501800000667572},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.5001999735832214},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4596000015735626},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.39469999074935913},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.3781999945640564},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.3644999861717224},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3490999937057495},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.3483999967575073},{"id":"https://openalex.org/C133112747","wikidata":"https://www.wikidata.org/wiki/Q7251931","display_name":"Protocol analysis","level":2,"score":0.3334999978542328},{"id":"https://openalex.org/C2780910867","wikidata":"https://www.wikidata.org/wiki/Q1952416","display_name":"Multimodality","level":2,"score":0.33329999446868896},{"id":"https://openalex.org/C59656382","wikidata":"https://www.wikidata.org/wiki/Q191536","display_name":"Conjunction (astronomy)","level":2,"score":0.3312000036239624},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.31529998779296875},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3046000003814697},{"id":"https://openalex.org/C195344581","wikidata":"https://www.wikidata.org/wiki/Q2555318","display_name":"Automated reasoning","level":2,"score":0.28439998626708984},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2766999900341034},{"id":"https://openalex.org/C25016198","wikidata":"https://www.wikidata.org/wiki/Q781833","display_name":"Temporal logic","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C37335422","wikidata":"https://www.wikidata.org/wiki/Q6888134","display_name":"Model-based reasoning","level":3,"score":0.275299996137619},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26930001378059387},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.25780001282691956},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.25589999556541443},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.25369998812675476},{"id":"https://openalex.org/C22367795","wikidata":"https://www.wikidata.org/wiki/Q7625208","display_name":"Structured prediction","level":2,"score":0.2531999945640564},{"id":"https://openalex.org/C2777488183","wikidata":"https://www.wikidata.org/wiki/Q6900510","display_name":"Safety monitoring","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.02635","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.02635","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.02635","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.02635","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8090023994445801}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vision-language":[0],"models":[1],"remain":[2],"susceptible":[3],"to":[4],"multimodal":[5],"jailbreaks":[6],"and":[7,16,56,144],"over-refusal":[8],"because":[9],"safety":[10,36,114],"hinges":[11],"on":[12,139],"both":[13],"visual":[14],"evidence":[15],"user":[17],"intent,":[18],"while":[19,61,149],"many":[20],"alignment":[21],"pipelines":[22],"supervise":[23],"only":[24],"the":[25,71,76],"final":[26,72],"response.":[27],"To":[28,74],"address":[29],"this,":[30],"we":[31,82],"present":[32],"SaFeR-ToolKit,":[33],"which":[34],"formalizes":[35],"decision-making":[37],"as":[38],"a":[39,43,46,48,57,62,65,84,88],"checkable":[40],"protocol.":[41],"Concretely,":[42],"planner":[44],"specifies":[45],"persona,":[47],"Perception":[49],"$\\to$":[50,52,92,94,142,147,155,159],"Reasoning":[51],"Decision":[53],"tool":[54,68,100],"set,":[55],"constrained":[58],"transition":[59],"graph,":[60],"responder":[63],"outputs":[64],"typed":[66],"key-value":[67],"trace":[69],"before":[70],"answer.":[73],"make":[75],"protocol":[77],"reliably":[78],"followed":[79],"in":[80],"practice,":[81],"train":[83],"single":[85],"policy":[86],"with":[87],"three-stage":[89],"curriculum":[90],"(SFT":[91,120],"DPO":[93,122],"GRPO),":[95],"where":[96],"GRPO":[97,124],"directly":[98],"supervises":[99],"usage":[101],"beyond":[102],"answer-level":[103],"feedback.":[104],"Our":[105],"contributions":[106],"are":[107,162],"two-fold:":[108],"I.":[109],"Dataset.":[110],"The":[111],"first":[112],"tool-based":[113],"reasoning":[115],"dataset,":[116],"comprising":[117],"31,654":[118],"examples":[119],"6k,":[121],"18.6k,":[123],"6k)":[125],"plus":[126],"1k":[127],"held-out":[128],"evaluation.":[129],"II.":[130],"Experiments.":[131],"On":[132],"Qwen2.5-VL,":[133],"SaFeR-ToolKit":[134],"significantly":[135],"improves":[136],"Safety/Helpfulness/Reasoning":[137],"Rigor":[138],"3B":[140],"(29.39/45.04/4.98":[141],"84.40/71.13/78.87)":[143],"7B":[145],"(53.21/52.92/19.26":[146],"86.34/80.79/85.34),":[148],"preserving":[150],"general":[151],"capabilities":[152],"(3B:":[153],"58.67":[154],"59.21;":[156],"7B:":[157],"66.39":[158],"66.81).":[160],"Codes":[161],"available":[163],"at":[164],"https://github.com/Duebassx/SaFeR_ToolKit.":[165]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-05T00:00:00"}