SIRF: A Spec-Internalized Risk Foundation Model for Industrial Content Risk Control

sirf:-a-spec-internalized-risk-foundation-model-for-industrial-content-risk-control

SIRF: A Spec-Internalized Risk Foundation Model for Industrial Content Risk Control

[Submitted on 10 Sep 2026 (v1), last revised 30 Oct 2026 (this version, v2)]

View PDF HTML (experimental)

Abstract:For industrial content risk control, the real deployment constraint is not average accuracy but how much risk can be auto-handled under high precision and second-level latency. We present SIRF (Spec-Internalized Risk Foundation Model), which internalizes a platform’s complex policies, synthesized without additional human annotation via EntiGraph, MAGA rewriting and account-level chain-of-thought (CoT), into the weights via continued pretraining (CPT), so rules are applied at high precision under an ultra-low-latency, verdict-only deployment. A controlled same-source comparison (Qwen3-8B-SFT vs. SIRF-8B-SFT, identical policy injection and verdict-only output form, differing only in policy-grounded CPT) attributes the gain to internalization: SIRF-8B-SFT reaches 71.3% Black Recall@P95, +15.1pp over the baseline, using only ~70M CPT tokens without harming general ability, and among included, logprob-available models under this interface it matches or exceeds far larger systems. SIRF is deployed as a tree-model adjudication layer (20% more mis-penalized samples recovered) and transfers to a freezing scenario at low cost (~70% relative mis-penalization reduction).

Submission history

From: Suwan Wu [view email]
[v1] Thu, 10 Sep 2026 16:08:54 UTC (2,922 KB)
[v2] Fri, 30 Oct 2026 08:37:35 UTC (2,915 KB)