How to use from the
Use from the
llama-cpp-python library
# !pip install llama-cpp-python

from llama_cpp import Llama

llm = Llama.from_pretrained(
	repo_id="prithivMLmods/SingGuard-NSFA-9B-GGUF",
	filename="",
)
llm.create_chat_completion(
	messages = [
		{
			"role": "user",
			"content": [
				{
					"type": "text",
					"text": "Describe this image in one sentence."
				},
				{
					"type": "image_url",
					"image_url": {
						"url": "https://cdn.britannica.com/61/93061-050-99147DCE/Statue-of-Liberty-Island-New-York-Bay.jpg"
					}
				}
			]
		}
	]
)

SingGuard-NSFA-9B-GGUF

SingGuard-NSFA-9B is the largest of four model sizes (0.8B, 2B, 4B, 9B) in a dual-mode guardrail framework developed by the SingGuard Team at Ant Group's AI Security Lab, fine-tuned from Qwen3.5-9B Base to secure agentic AI systems against operational threats like prompt injection, sensitive information extraction, malicious code requests, dangerous tool misuse, and resource exhaustion. It is built on the NSFA (Not-Secure-For-Agents) taxonomy — a CIA-triad-grounded hierarchical classification of 185 risk variants spanning 5 query-side domains (e.g., Prompt Injection & Jailbreak, Malicious Code & Cyberattack) and 2 response-side domains (Hazardous Action Generation, Sensitive Information Leakage) — and operates as a single-turn, text-based guardrail supporting 133 languages through two complementary inference modes: lightweight discriminative classification heads on a frozen backbone for real-time detection (~50ms per sample on an A100 via vLLM embedding mode), and full generative chain-of-thought reasoning for interpretable offline auditing and compliance workflows. Across three purpose-built multilingual benchmarks (including a cross-source benchmark adapted from AgentDojo, InjecAgent, AgentHarm, and others), all SingGuard-NSFA models achieve above 94% F1, surpassing the strongest competing guardrails by 6–12 absolute F1 points, with the architecture also natively extensible to new risk domains — including content safety — by training only additional lightweight classification heads without retraining the backbone; it is explicitly scoped to single-turn operational security rather than multi-turn trajectory analysis, multimodal threats, or textual content moderation, and is intended strictly as a defensive tool.

Model Files

File Name Quant Type File Size File Link
SingGuard-NSFA-9B.BF16.gguf BF16 17.9 GB Download
SingGuard-NSFA-9B.F16.gguf F16 17.9 GB Download
SingGuard-NSFA-9B.Q3_K_L.gguf Q3_K_L 4.92 GB Download
SingGuard-NSFA-9B.Q3_K_M.gguf Q3_K_M 4.62 GB Download
SingGuard-NSFA-9B.Q3_K_S.gguf Q3_K_S 4.26 GB Download
SingGuard-NSFA-9B.Q4_K_M.gguf Q4_K_M 5.63 GB Download
SingGuard-NSFA-9B.Q4_K_S.gguf Q4_K_S 5.35 GB Download
SingGuard-NSFA-9B.Q5_K_M.gguf Q5_K_M 6.47 GB Download
SingGuard-NSFA-9B.Q5_K_S.gguf Q5_K_S 6.3 GB Download
SingGuard-NSFA-9B.Q8_0.gguf Q8_0 9.53 GB Download
SingGuard-NSFA-9B.mmproj-bf16.gguf mmproj-bf16 922 MB Download
SingGuard-NSFA-9B.mmproj-f16.gguf mmproj-f16 922 MB Download
SingGuard-NSFA-9B.mmproj-q8_0.gguf mmproj-q8_0 624 MB Download

llama.cpp

LLM inference in C/C++ — https://github.com/ggml-org/llama.cpp

Downloads last month
-
GGUF
Model size
9B params
Architecture
qwen35
Hardware compatibility
Log In to add your hardware

3-bit

4-bit

5-bit

8-bit

16-bit

Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for prithivMLmods/SingGuard-NSFA-9B-GGUF

Quantized
(1)
this model

Collection including prithivMLmods/SingGuard-NSFA-9B-GGUF