Skip to content

GLiGuard 300M

FastinoOpen weights

GLiNER2 fine-tuned for binary safety questions. It keeps the entity head but scores 0.0 on extraction after the fine-tune.

typed-decisions
—
not run
Metatext suite
0.537
3/7 over baseline
ECE untuned
0.230
p50 per case
155 ms
four CPU cores

Specifications

Checkpoint
fastino/gliguard-LLMGuardrails-300M
Publisher
Fastino
Mechanism
Schema-conditioned encoder (extraction + classification)
Backbone
DeBERTa-v3, guardrail fine-tune
Parameters
300M
License
Apache 2.0
Runs as
open weights, self-hosted
Library
gliner2
Primitives
Choice, Score, Noul, Extraction
Pricing
none — your compute

Metatext decisionsrank 12 of 21

Full leaderboard →
Per-question accuracy — default payload, parallel mode, 120 judgments
TaskQuestionTypeAccuracyBaselineBeats?
agent_tracesoutcomechoice0.3570.357❌
agent_tracesneeds_humannoul0.6430.714❌
customer_servicedepartmentchoice0.7500.400✅
customer_servicerefund_requestednoul0.3000.700❌
customer_servicefrustrationscore0.5000.500❌
security_incidentsseveritychoice0.3750.312✅
security_incidentsactively_exploitednoul0.8120.688✅

Frequently asked questions

How does GLiGuard 300M compare to Jev?

On the Metatext suite GLiGuard 300M scores 0.537 against Jev's 0.863.

Is GLiGuard 300M open source?

Yes. fastino/gliguard-LLMGuardrails-300M is released under Apache 2.0 and runs on your own hardware with the gliner2 library.

Can GLiGuard 300M extract entities?

Yes. GLiGuard 300M has a span head and scores 0.000 micro-F1 on the eight-case extraction task.