English
Safety
Defense
Jailbreak
Multi-turn
Harmful
Benign
Frinkleko commited on
Commit
5f989e3
·
verified ·
1 Parent(s): 856053d

init commit

Browse files
Files changed (1) hide show
  1. README.md +61 -0
README.md CHANGED
@@ -1,3 +1,64 @@
1
  ---
2
  license: apache-2.0
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
3
  ---
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
  ---
2
  license: apache-2.0
3
+ language:
4
+ - en
5
+ tags:
6
+ - Safety
7
+ - Defense
8
+ - Jailbreak
9
+ - Multi-turn
10
+ - Harmful
11
+ - Benign
12
+ pretty_name: MTID
13
+ size_categories:
14
+ - 10K<n<100K
15
+ base_model:
16
+ - Qwen/Qwen3-4B-Instruct-2507
17
+ datasets:
18
+ - Graph-COM/MTID
19
  ---
20
+ # TurnGate: Response-Aware Defense Against Hidden Malicious Intent in Multi-Turn Dialogue
21
+
22
+ <a href="https://arxiv.org/abs/2605.05630" target="_blank">
23
+ <img alt="arXiv" src="https://img.shields.io/badge/arXiv-TurnGate-red?logo=arxiv&style=for-the-badge" />
24
+ </a>
25
+ <a href="https://turn-gate.github.io" target="_blank">
26
+ <img alt="Website" src="https://img.shields.io/badge/🌎_Homepage-blue.svg?style=for-the-badge" />
27
+ </a>
28
+ <a href="https://github.com/Graph-COM/TurnGate" target="_blank">
29
+ <img alt="GitHub code" src="https://img.shields.io/badge/💻_Code_GitHub-black.svg?style=for-the-badge" />
30
+ </a>
31
+ <a href="#cite" target="_blank">
32
+ <img alt="Cite" src="https://img.shields.io/badge/📖_Cite!-lightgrey?style=for-the-badge" />
33
+ </a>
34
+ <a href="https://www.python.org/" target="_blank">
35
+ <img alt="Python" src="https://img.shields.io/badge/Python-3.12-blue?style=for-the-badge" />
36
+ </a>
37
+
38
+
39
+ ## Overview
40
+
41
+ TurnGate is a response-aware defense mechanism designed to detect and mitigate hidden malicious intent in multi-turn dialogue systems. Defending state-of-the-art multi-turn malicious attacks like [CKA-Agent](https://cka-agent.github.io/).
42
+
43
+ ![TurnGate Pipeline](https://github.com/Graph-COM/TurnGate/blob/main/assets/pipeline.png?raw=true)
44
+
45
+ ## TurnGate-0.1
46
+
47
+ TurnGate is a specialized monitor designed to detect hidden malicious intent in multi-turn dialogues. Unlike traditional filters that look at queries in isolation, TurnGate is response-aware: it inspects the assistant's candidate response in the context of the full dialogue history to identify the precise "closure turn" where a harmful objective becomes actionable.
48
+
49
+ This repository contains the weights for TurnGate-0.1, a model trained on the Multi-Turn Intent Dataset (MTID) and optimized via reinforcement learning with turn-level process rewards.
50
+
51
+ ## Cite
52
+ If you find this repository useful for your research, please consider citing the following paper:
53
+
54
+ ```bibtex
55
+ @misc{shen2026turnlateresponseawaredefense,
56
+ title={One Turn Too Late: Response-Aware Defense Against Hidden Malicious Intent in Multi-Turn Dialogue},
57
+ author={Xinjie Shen and Rongzhe Wei and Peizhi Niu and Haoyu Wang and Ruihan Wu and Eli Chien and Bo Li and Pin-Yu Chen and Pan Li},
58
+ year={2026},
59
+ eprint={2605.05630},
60
+ archivePrefix={arXiv},
61
+ primaryClass={cs.CL},
62
+ url={https://arxiv.org/abs/2605.05630},
63
+ }
64
+ ```