0.8B open-source HaloGuard 2.0 claims streaming-guard SOTA, beating models 5-10x its size

const_reborn · x · 2026-11-05

The xnavkum team open-sourced HaloGuard 2.0, a streaming output guard that intercepts unsafe content token-by-token as the model generates — closing the blind spot where input guards never see what the model actually says.

Results: at just 0.8B parameters, it beats Qwen3Guard-Stream at every size and outperforms full-reply guards 5-10x larger, claiming SOTA among open streaming guards. Paper and weights are released; the work was led by a small team in the Bittensor ecosystem.

Related event: 0.8B HaloGuard 2.0 Tops Open-Source Streaming Safety Guardrails(2 posts)→

Original post →

More from Models

Models channel →