{
  "alinia": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "content_safety",
      "hallucination",
      "pii",
      "prompt_injection",
      "toxicity"
    ],
    "default_license": "proprietary",
    "description": "Hosted content-moderation and safety-detection API with configurable detection policies.",
    "display_name": "Alinia",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [
      "context_documents",
      "output"
    ],
    "output_shapes": [
      "multi_label",
      "score"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": true,
    "stages": [
      "input",
      "output",
      "rag_context"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Alinia AI"
  },
  "any_llm": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "general_judge"
    ],
    "default_license": "apache-2.0",
    "description": "Policy-based LLM judge that grades text against a natural-language policy using an LLM provider.",
    "display_name": "AnyLlm",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "model_id",
      "prompt_version",
      "system_prompt"
    ],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [
      "policy"
    ],
    "requires_api_key": true,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Mozilla AI"
  },
  "azure_content_safety": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "content_safety",
      "toxicity"
    ],
    "default_license": "proprietary",
    "description": "Hosted moderation of text and images across hate, sexual, self-harm, and violence categories with 0-7 severity scores.",
    "display_name": "Azure Content Safety",
    "multilingual": true,
    "multimodal": true,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "multi_label",
      "score"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": true,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Microsoft"
  },
  "azure_prompt_shields": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "proprietary",
    "description": "Hosted detector for direct (user prompt) and indirect (document-borne) prompt-injection and jailbreak attacks.",
    "display_name": "Azure Prompt Shields",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [
      "documents"
    ],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": true,
    "stages": [
      "input",
      "rag_context"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Microsoft"
  },
  "bedrock_guardrails": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "content_safety",
      "hallucination",
      "off_topic",
      "pii"
    ],
    "default_license": "proprietary",
    "description": "Hosted, configurable moderation covering content filters, denied topics, PII, word filters, and contextual grounding.",
    "display_name": "Bedrock Guardrails",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "categorical",
      "score"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": true,
    "stages": [
      "input",
      "output",
      "rag_context"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Amazon"
  },
  "bielik_guard": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "content_safety",
      "toxicity"
    ],
    "default_license": "apache-2.0",
    "description": "Polish multi-label safety classifier.",
    "display_name": "Bielik Guard",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "multi_label",
      "score"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "SpeakLeash / Bielik.AI"
  },
  "compass_judger": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "general_judge"
    ],
    "default_license": "apache-2.0",
    "description": "Generalist LLM judge that scores a response against user-defined criteria and rubric on a 1-10 scale.",
    "display_name": "CompassJudger",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "rubric"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "output"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "OpenCompass"
  },
  "deepset": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "mit",
    "description": "Binary prompt-injection classifier.",
    "display_name": "Deepset",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "deepset"
  },
  "duo_guard": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "content_safety",
      "prompt_injection",
      "toxicity"
    ],
    "default_license": "apache-2.0",
    "description": "Multilingual multi-label safety classifier scoring text across 12 harm categories including jailbreak prompts.",
    "display_name": "DuoGuard",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "multi_label",
      "score"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [
      {
        "license": "apache-2.0",
        "model_id": "DuoGuard/DuoGuard-0.5B"
      },
      {
        "license": "apache-2.0",
        "model_id": "DuoGuard/DuoGuard-1.5B-transfer"
      },
      {
        "license": "llama-3.2",
        "model_id": "DuoGuard/DuoGuard-1B-Llama-3.2-transfer"
      }
    ],
    "vendor": "DuoGuard"
  },
  "dyna_guard": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety",
      "general_judge"
    ],
    "default_license": "apache-2.0",
    "description": "Dynamic guardian model evaluating conversation compliance with user-defined policies.",
    "display_name": "DynaGuard",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "binary"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "DynaGuard"
  },
  "flowjudge": {
    "alternate_backends": [],
    "backend": "library_wrapped",
    "categories": [
      "general_judge"
    ],
    "default_license": "apache-2.0",
    "description": "Local LLM judge scoring text against user-defined criteria, metrics, and rubrics.",
    "display_name": "Flow Judge",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "rubric"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [
      "output"
    ],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Flow AI"
  },
  "gli_guard": {
    "alternate_backends": [],
    "backend": "library_wrapped",
    "categories": [
      "content_safety",
      "prompt_injection",
      "toxicity"
    ],
    "default_license": "apache-2.0",
    "description": "Schema-driven safety, toxicity, jailbreak, and refusal detector.",
    "display_name": "GLiGuard",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "categorical",
      "multi_label"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Fastino"
  },
  "gli_ner_pii": {
    "alternate_backends": [],
    "backend": "library_wrapped",
    "categories": [
      "pii"
    ],
    "default_license": "apache-2.0",
    "description": "Span-level PII/NER detector emitting character spans and a redacted copy of the text.",
    "display_name": "GLiNER2 PII",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [
      "entity_types",
      "redaction_placeholder",
      "threshold"
    ],
    "output_shapes": [
      "multi_label",
      "span"
    ],
    "primary_category": "pii",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Fastino"
  },
  "glider": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "general_judge"
    ],
    "default_license": "cc-by-nc-4.0",
    "description": "Prompt-based LLM judge that grades text against user-supplied pass criteria and rubric, returning reasoning and highlighted phrases.",
    "display_name": "GLIDER",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "rubric"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Patronus AI"
  },
  "gpt_oss_safeguard": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety",
      "general_judge"
    ],
    "default_license": "apache-2.0",
    "description": "Policy-grounded reasoning safety classifier that judges text against a bring-your-own written policy.",
    "display_name": "gpt-oss-safeguard",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "OpenAI"
  },
  "granite_guardian": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "bias",
      "content_safety",
      "general_judge",
      "hallucination",
      "prompt_injection",
      "tool_use"
    ],
    "default_license": "apache-2.0",
    "description": "Hybrid-thinking safety and judge model covering harm, RAG groundedness, and function-calling risks via bring-your-own-criteria.",
    "display_name": "Granite Guardian",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "available_tools",
      "documents",
      "output_text"
    ],
    "output_shapes": [
      "categorical"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output",
      "rag_context"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "IBM"
  },
  "harm_guard": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "content_safety",
      "prompt_injection"
    ],
    "default_license": "apache-2.0",
    "description": "Binary safety and jailbreak classifier, scoring a prompt or prompt-response pair.",
    "display_name": "HarmAug-Guard",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "hbseong"
  },
  "injec_guard": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "mit",
    "description": "Binary prompt-injection classifier trained to mitigate over-defense.",
    "display_name": "PIGuard",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "leolee99"
  },
  "jasper": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "mit",
    "description": "Binary prompt-injection classifiers.",
    "display_name": "Jasper",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "JasperLS"
  },
  "kanana_safeguard": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety",
      "prompt_injection"
    ],
    "default_license": "apache-2.0",
    "description": "Korean safety decoder models covering harmful content and legal risk.",
    "display_name": "Kanana Safeguard",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "categorical"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Kakao"
  },
  "lakera_guard": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "content_safety",
      "pii",
      "prompt_injection"
    ],
    "default_license": "proprietary",
    "description": "Hosted API for prompt-injection, jailbreak, content-moderation, and PII detection.",
    "display_name": "Lakera Guard",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "categorical",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": true,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Lakera"
  },
  "lettuce_detect": {
    "alternate_backends": [],
    "backend": "library_wrapped",
    "categories": [
      "hallucination"
    ],
    "default_license": "mit",
    "description": "Token/span-level RAG hallucination detector.",
    "display_name": "LettuceDetect",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "question"
    ],
    "output_shapes": [
      "binary",
      "span"
    ],
    "primary_category": "hallucination",
    "required_validate_kwargs": [
      "context"
    ],
    "requires_api_key": false,
    "stages": [
      "output",
      "rag_context"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "KRLabs"
  },
  "llama_guard": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety"
    ],
    "default_license": "llama-3.2",
    "description": "Decoder-LLM safety classifier judging prompts and responses against the 14-category MLCommons hazard taxonomy.",
    "display_name": "Llama Guard",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "categorical"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [
      {
        "license": "llama-3.2",
        "model_id": "meta-llama/Llama-Guard-3-1B"
      },
      {
        "license": "llama-3.1",
        "model_id": "meta-llama/Llama-Guard-3-8B"
      }
    ],
    "vendor": "Meta"
  },
  "nemotron_content_safety": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety"
    ],
    "default_license": "gemma",
    "description": "Reasoning safety classifier covering a 22-category content-safety taxonomy.",
    "display_name": "Nemotron Content Safety",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "categorical"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "NVIDIA"
  },
  "off_topic": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "off_topic"
    ],
    "default_license": "mit",
    "description": "Cross-encoder relevance detector that flags whether an input strays from a comparison text.",
    "display_name": "Off-Topic",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "off_topic",
    "required_validate_kwargs": [
      "comparison_text"
    ],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "GovTech Singapore"
  },
  "openai_moderation": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "content_safety",
      "toxicity"
    ],
    "default_license": "proprietary",
    "description": "Hosted moderation API flagging content across 13 harm categories with calibrated scores.",
    "display_name": "OpenAI Moderation",
    "multilingual": true,
    "multimodal": true,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "multi_label",
      "score"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": true,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "OpenAI"
  },
  "pangolin": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "apache-2.0",
    "description": "Binary prompt-injection classifier.",
    "display_name": "Pangolin Guard",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "dcarpintero"
  },
  "patronus": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "general_judge",
      "hallucination",
      "pii",
      "prompt_injection",
      "toxicity"
    ],
    "default_license": "proprietary",
    "description": "Hosted evaluation API running configurable evaluators for hallucination, toxicity, PII, prompt injection, and custom judging.",
    "display_name": "Patronus",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text",
      "retrieved_context"
    ],
    "output_shapes": [
      "categorical",
      "score"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [],
    "requires_api_key": true,
    "stages": [
      "input",
      "output",
      "rag_context"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Patronus AI"
  },
  "poly_guard": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety"
    ],
    "default_license": "mrl",
    "description": "Multilingual safety-moderation judge reporting request harm, response harm, and refusal across 17 languages.",
    "display_name": "PolyGuard",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "categorical"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [
      {
        "license": "mrl",
        "model_id": "ToxicityPrompts/PolyGuard-Ministral"
      },
      {
        "license": "apache-2.0",
        "model_id": "ToxicityPrompts/PolyGuard-Qwen"
      },
      {
        "license": "apache-2.0",
        "model_id": "ToxicityPrompts/PolyGuard-Qwen-Smol"
      }
    ],
    "vendor": "ToxicityPrompts"
  },
  "prometheus": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "general_judge"
    ],
    "default_license": "apache-2.0",
    "description": "Open rubric-based LLM judge grading a response on a user-defined 1-5 rubric.",
    "display_name": "Prometheus",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "rubric"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "output"
    ],
    "supports_batch": true,
    "variant_licenses": [
      {
        "license": "llama-2",
        "model_id": "prometheus-eval/prometheus-13b-v1.0"
      },
      {
        "license": "llama-2",
        "model_id": "prometheus-eval/prometheus-7b-v1.0"
      },
      {
        "license": "apache-2.0",
        "model_id": "prometheus-eval/prometheus-7b-v2.0"
      },
      {
        "license": "apache-2.0",
        "model_id": "prometheus-eval/prometheus-8x7b-v2.0"
      }
    ],
    "vendor": "KAIST / prometheus-eval"
  },
  "prompt_guard": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "llama-4",
    "description": "Encoder classifier for prompt-injection and jailbreak detection.",
    "display_name": "Prompt Guard 2",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "Meta"
  },
  "protectai": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "apache-2.0",
    "description": "Binary prompt-injection classifiers.",
    "display_name": "ProtectAI",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "ProtectAI"
  },
  "qwen3_guard": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety"
    ],
    "default_license": "apache-2.0",
    "description": "Generative safety moderation with three-level severity across 119 languages.",
    "display_name": "Qwen3Guard",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "categorical",
      "score"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Qwen"
  },
  "qwen3_guard_stream": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety"
    ],
    "default_license": "apache-2.0",
    "description": "Token-level streaming safety moderation with span output.",
    "display_name": "Qwen3Guard-Stream",
    "multilingual": true,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "categorical",
      "score",
      "span"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Qwen"
  },
  "selene": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "general_judge"
    ],
    "default_license": "llama-3.1",
    "description": "General-purpose LLM judge grading a response against a user-defined 1-5 rubric.",
    "display_name": "Selene 1 Mini",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "rubric"
    ],
    "primary_category": "general_judge",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Atla"
  },
  "sentinel": {
    "alternate_backends": [],
    "backend": "local_encoder",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "elastic-2.0",
    "description": "Binary prompt-injection classifier.",
    "display_name": "Sentinel",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": true,
    "variant_licenses": [],
    "vendor": "Qualifire"
  },
  "shield_gemma": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety"
    ],
    "default_license": "gemma",
    "description": "Policy-conditioned safety classifier that judges a prompt against a user-supplied policy via Yes/No token logits.",
    "display_name": "ShieldGemma",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Google"
  },
  "susfactor": {
    "alternate_backends": [
      "hosted_api"
    ],
    "backend": "local_encoder",
    "categories": [
      "prompt_injection"
    ],
    "default_license": "proprietary",
    "description": "Binary prompt-injection and jailbreak classifier using a chunked e5-large encoder with a trained MLP head.",
    "display_name": "SusFactor",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "binary",
      "score"
    ],
    "primary_category": "prompt_injection",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "0DIN"
  },
  "watsonx_guardian": {
    "alternate_backends": [],
    "backend": "hosted_api",
    "categories": [
      "bias",
      "content_safety",
      "hallucination",
      "prompt_injection",
      "toxicity"
    ],
    "default_license": "proprietary",
    "description": "Hosted text-detection moderation API running configurable Granite Guardian detectors.",
    "display_name": "watsonx Guardian",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [],
    "output_shapes": [
      "multi_label",
      "score",
      "span"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": true,
    "stages": [
      "input",
      "output",
      "rag_context"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "IBM"
  },
  "wild_guard": {
    "alternate_backends": [],
    "backend": "local_decoder",
    "categories": [
      "content_safety"
    ],
    "default_license": "apache-2.0",
    "description": "One-pass safety-moderation judge reporting prompt harm, response harm, and refusal.",
    "display_name": "WildGuard",
    "multilingual": false,
    "multimodal": false,
    "optional_validate_kwargs": [
      "output_text"
    ],
    "output_shapes": [
      "binary",
      "categorical"
    ],
    "primary_category": "content_safety",
    "required_validate_kwargs": [],
    "requires_api_key": false,
    "stages": [
      "input",
      "output"
    ],
    "supports_batch": false,
    "variant_licenses": [],
    "vendor": "Allen Institute for AI"
  }
}