{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2604-24700","title":"Green Shielding: A User-Centric Approach Towards Trustworthy AI","arxiv_id":"2604.24700","date":"2026-04-27","proceeding":null,"authors":["Aaron J. Li","Nicolas Sanchez","Hao Huang","Ruijiang Dong","Jaskaran Bains","Katrin Jaradeh","Zhen Xiang","Bo Li","Feng Liu","Aaron Kornblith","Bin Yu"],"abstract":"Large language models (LLMs) are increasingly deployed, yet their outputs can be highly sensitive to routine, non-adversarial variation in how users phrase queries, a gap not well addressed by existing red-teaming efforts. We propose Green Shielding, a user-centric agenda for building evidence-backed deployment guidance by characterizing how benign input variation shifts model behavior. We operationalize this agenda through the CUE criteria: benchmarks with authentic Context, reference standards and metrics that capture true Utility, and perturbations that reflect realistic variations in the Elicitation of model behavior. Guided by the PCS framework and developed with practicing physicians, we instantiate Green Shielding in medical diagnosis through HealthCareMagic-Diagnosis (HCM-Dx), a benchmark of patient-authored queries, together with structured reference diagnosis sets and clinically grounded metrics for evaluating differential diagnosis lists. We also study perturbation regimes that capture routine input variation and show that prompt-level factors shift model behavior along clinically meaningful dimensions. Across multiple frontier LLMs, these shifts trace out Pareto-like tradeoffs. In particular, neutralization, which removes common user-level factors while preserving clinical content, increases plausibility and yields more concise, clinician-like differentials, but reduces coverage of highly likely and safety-critical conditions. Together, these results show that interaction choices can systematically shift task-relevant properties of model outputs and support user-facing guidance for safer deployment in high-stakes domains. Although instantiated here in medical diagnosis, the agenda extends naturally to other decision-support settings and agentic AI systems.","url_abs":"https://arxiv.org/abs/2604.24700","url_pdf":"https://arxiv.org/pdf/2604.24700","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2604.24700","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2604.24700"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/aaron-jx-li/green-shielding","reach":null}],"summary":{"ran_draft_wrong":4,"unverified":3},"by_repo_kind":{"found_in_text":{"samples":7,"ran":4,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":7,"samples":[{"code_sha256_prefix":"5babbc2ec3a63f60","entry":"_get_output_text","repo":"aaron-jx-li/green-shielding","repo_kind":"found_in_text","path":"normalization/neutralize_factors.py","file_url":"https://github.com/aaron-jx-li/green-shielding/blob/HEAD/normalization/neutralize_factors.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"5babbc2ec3a63f60"}},{"code_sha256_prefix":"c979f5010a762092","entry":"_json_load_best_effort","repo":"aaron-jx-li/green-shielding","repo_kind":"found_in_text","path":"normalization/neutralize_factors.py","file_url":"https://github.com/aaron-jx-li/green-shielding/blob/HEAD/normalization/neutralize_factors.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"c979f5010a762092"}},{"code_sha256_prefix":"b232a98b8c7eaa6d","entry":"_strip_code_fences","repo":"aaron-jx-li/green-shielding","repo_kind":"found_in_text","path":"normalization/neutralize_factors.py","file_url":"https://github.com/aaron-jx-li/green-shielding/blob/HEAD/normalization/neutralize_factors.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"b232a98b8c7eaa6d"}},{"code_sha256_prefix":"f6528cf8d6c9a124","entry":"build_neutralizer_system_prompt","repo":"aaron-jx-li/green-shielding","repo_kind":"found_in_text","path":"normalization/neutralize_factors.py","file_url":"https://github.com/aaron-jx-li/green-shielding/blob/HEAD/normalization/neutralize_factors.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"f6528cf8d6c9a124"}},{"code_sha256_prefix":"d8460f40995af8e8","entry":"_get_openai_client","repo":"aaron-jx-li/green-shielding","repo_kind":"found_in_text","path":"normalization/neutralize_factors.py","file_url":"https://github.com/aaron-jx-li/green-shielding/blob/HEAD/normalization/neutralize_factors.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"d8460f40995af8e8"}},{"code_sha256_prefix":"0fe88fd1f89fb72c","entry":"_validate_paper_factors","repo":"aaron-jx-li/green-shielding","repo_kind":"found_in_text","path":"normalization/neutralize_factors.py","file_url":"https://github.com/aaron-jx-li/green-shielding/blob/HEAD/normalization/neutralize_factors.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"0fe88fd1f89fb72c"}},{"code_sha256_prefix":"02c06698297d4bf1","entry":"neutralize_prompt_selective","repo":"aaron-jx-li/green-shielding","repo_kind":"found_in_text","path":"normalization/neutralize_factors.py","file_url":"https://github.com/aaron-jx-li/green-shielding/blob/HEAD/normalization/neutralize_factors.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"02c06698297d4bf1"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.CL","source":"arxiv_2026.jsonl"},"syntology_extracted_results":{"kind":"leaderboard_placements","source":"Syntology's leaderboard-shaped extractor over the paper's own arXiv-HTML tables: a model pointed at a cell, the number was read from that cell and checked against the board's metric, dataset, split and scale, and an independent check accepted the entry; not reviewed by the paper's authors or the archive's editors","extractor_model":"global.anthropic.claude-sonnet-4-5-20250929-v1:0","verifier_model":null,"prompt_sha":"fa63d4bb9d755694","coverage":{"sentence":"Syntology has checked 6,264 of the 9,581 papers on this site that are newer than the archive; results from the others appear after they are checked.","papers_newer_than_archive":9581,"papers_checked":6264},"entries":[],"not_placed":{"boards":1,"rejected_by_independent_check":0,"refused_by_a_rule":1,"check_did_not_answer":0,"proposed_without_a_cell":0,"declined_by_site":0}}}