{"id":"https://openalex.org/W7162432375","doi":"https://doi.org/10.48550/arxiv.2605.25893","title":"$D^2$-Monitor: Dynamic Safety Monitoring for Diffusion LLMs via Hesitation-Aware Routing","display_name":"$D^2$-Monitor: Dynamic Safety Monitoring for Diffusion LLMs via Hesitation-Aware Routing","publication_year":2026,"publication_date":"2026-05-25","ids":{"openalex":"https://openalex.org/W7162432375","doi":"https://doi.org/10.48550/arxiv.2605.25893"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.25893","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25893","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.25893","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125081008","display_name":"Aoxi Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Aoxi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137029608","display_name":"Yupeng Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yupeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124915910","display_name":"James Oldfield","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Oldfield, James","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075090942","display_name":"Guanzhe Hong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hong, Guanzhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060684352","display_name":"Junchi Yu","orcid":"https://orcid.org/0000-0003-4118-3248"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Junchi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137000895","display_name":"Baoyuan Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Baoyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137025558","display_name":"Philip Torr","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Torr, Philip","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5091670711","display_name":"Adel Bibi","orcid":"https://orcid.org/0000-0002-6169-3918"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bibi, Adel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.23420000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.23420000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.18799999356269836,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.060499999672174454,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/margin","display_name":"Margin (machine learning)","score":0.5613999962806702},{"id":"https://openalex.org/keywords/trajectory","display_name":"Trajectory","score":0.5436999797821045},{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.507099986076355},{"id":"https://openalex.org/keywords/proxy","display_name":"Proxy (statistics)","score":0.4844000041484833},{"id":"https://openalex.org/keywords/autoregressive-model","display_name":"Autoregressive model","score":0.4659999907016754},{"id":"https://openalex.org/keywords/signal","display_name":"SIGNAL (programming language)","score":0.41029998660087585},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.3407000005245209},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.33180001378059387}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.696399986743927},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.5613999962806702},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.5436999797821045},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.507099986076355},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.4844000041484833},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.47940000891685486},{"id":"https://openalex.org/C159877910","wikidata":"https://www.wikidata.org/wiki/Q2202883","display_name":"Autoregressive model","level":2,"score":0.4659999907016754},{"id":"https://openalex.org/C2779843651","wikidata":"https://www.wikidata.org/wiki/Q7390335","display_name":"SIGNAL (programming language)","level":2,"score":0.41029998660087585},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3472000062465668},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.3407000005245209},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.33180001378059387},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.31459999084472656},{"id":"https://openalex.org/C132943942","wikidata":"https://www.wikidata.org/wiki/Q2562511","display_name":"Footprint","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C2777488183","wikidata":"https://www.wikidata.org/wiki/Q6900510","display_name":"Safety monitoring","level":2,"score":0.2964000105857849},{"id":"https://openalex.org/C42058472","wikidata":"https://www.wikidata.org/wiki/Q810214","display_name":"Base (topology)","level":2,"score":0.2913999855518341},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.2863999903202057},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.2840999960899353},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.2773999869823456},{"id":"https://openalex.org/C2777852691","wikidata":"https://www.wikidata.org/wiki/Q13430821","display_name":"Crowds","level":2,"score":0.26249998807907104},{"id":"https://openalex.org/C2776902269","wikidata":"https://www.wikidata.org/wiki/Q5165493","display_name":"Continuous monitoring","level":2,"score":0.26100000739097595}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.25893","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25893","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.25893","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.25893","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Despite":[0],"the":[1,52,77,94,148,198],"emergence":[2],"of":[3,54,93,100,114],"diffusion":[4],"large":[5,14],"language":[6,15],"models":[7,16],"(D-LLMs)":[8],"as":[9,135],"an":[10,136],"alternative":[11],"to":[12,72,139,206],"autoregressive":[13],"(AR-LLMs),":[17],"safety":[18,82,126],"monitoring":[19,48,168],"for":[20,57,128],"D-LLMs":[21,27],"remains":[22],"largely":[23],"unexplored.":[24],"Unlike":[25],"AR-LLMs,":[26],"generate":[28],"text":[29],"through":[30],"a":[31,90,112,124,132,152,154,189],"multi-step":[32],"denoising":[33],"process,":[34],"exposing":[35],"intermediate":[36,84],"hidden":[37,85],"representations":[38],"that":[39,76],"may":[40],"contain":[41],"safety-relevant":[42],"information":[43],"unavailable":[44],"in":[45,104],"standard":[46],"single-step":[47],"setups.":[49],"Motivated":[50],"by":[51],"suitability":[53],"lightweight":[55,133],"probes":[56,69],"always-on":[58,137],"monitoring,":[59],"we":[60,121],"analyze":[61],"which":[62],"trajectory-level":[63],"signals":[64],"best":[65,199],"indicate":[66],"when":[67],"such":[68,101],"are":[70],"likely":[71],"struggle.":[73],"We":[74],"find":[75],"most":[78],"informative":[79],"signal":[80],"is":[81,161],"hesitation:":[83],"states":[86],"repeatedly":[87],"falling":[88],"within":[89],"small":[91],"margin":[92],"probe's":[95],"decision":[96],"boundary.":[97],"The":[98],"number":[99],"hesitation":[102,142,149],"steps":[103],"D-LLM's":[105],"trajectory":[106],"predicts":[107],"probe":[108,134,160],"failure":[109],"effectively,":[110],"providing":[111],"proxy":[113],"sample":[115],"difficulty.":[116],"Building":[117],"on":[118,175],"this":[119],"analysis,":[120],"propose":[122],"$D^2$-Monitor,":[123],"bi-level":[125],"monitor":[127,138],"D-LLMs.":[129],"$D^2$-Monitor":[130,184],"adopts":[131],"jointly":[140],"estimate":[141],"and":[143,196,203],"perform":[144],"base":[145],"classification.":[146],"When":[147],"level":[150],"exceeds":[151],"threshold,":[153],"more":[155],"expressive":[156],"but":[157],"computationally":[158],"heavier":[159],"activated.":[162],"This":[163],"dynamic":[164],"routing":[165],"mechanism":[166],"allocates":[167],"resources":[169],"efficiently":[170],"at":[171],"test":[172],"time.":[173],"Evaluated":[174],"3":[176],"datasets":[177],"(WildguardMix,":[178],"ToxicChat,":[179],"OpenAI-Moderation)":[180],"across":[181],"4":[182],"D-LLMs,":[183],"achieves":[185],"state-of-the-art":[186],"performance":[187],"with":[188],"compact":[190],"parameter":[191],"footprint":[192],"($\\leq$":[193],"0.85M":[194],"parameters),":[195],"exhibits":[197],"trade-off":[200],"between":[201],"effectiveness":[202],"efficiency":[204],"relative":[205],"8":[207],"baselines.":[208]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-27T00:00:00"}
