Granite Guardian
IBMIBM's open guardrail model family for detecting risks in prompts and responses, plus RAG-specific checks. It covers harm, social bias, jailbreaking, violence, profanity and sexual content, and adds hallucination checks for retrieval pipelines (context relevance, groundedness, answer relevance).
Granite Guardian 3.2 (5B, distilled from the 8B), covering harm, social bias, jailbreaking, violence, profanity and sexual content, plus RAG context relevance, groundedness and answer relevance and function-calling risk. The card describes the training data as human-annotated and synthetic without publishing the mixture. Verified 2026-08-13 via the HF model card.
Openness
3 medium confidence- weights
- open(granite-guardian-3.2-5b on HF)
- data
- not-released
- license
- Apache-2.0(OSI)
Open weights under Apache-2.0, permissive and OSI-approved, but neither the post-training data nor the fine-tuning pipeline is released, and the rung above requires both - so this scores 3, the rung every comparable Apache-2.0 guardrail model sits on. The card has a Training Data section that names the ingredients without publishing the mixture. A strong open-weights release even so, and the licence is not what holds it back.
- https://huggingface.co/ibm-granite/granite-guardian-3.2-5b recorded 2026-08-13
Repo shows License - apache-2.0, ungated, with three safetensors shards downloadable. The Training Data section says the model is 'trained on a combination of human annotated and synthetic data' drawing samples from hh-rlhf, but publishes no mixture and declares no datasets in cardData.
- https://huggingface.co/ibm-granite/granite-guardian-3.2-5b/raw/main/README.md recorded 2026-08-13
Raw card front matter records license - apache-2.0 and no datasets key; the Training Data section describes human-annotated and synthetic data rather than a released corpus.
Adoption
1 medium confidence1,837 downloads in the trailing 30 days for the one declared artifact, ibm-granite/granite-guardian-3.2-5b, which bands at under 10K, level 1 on the software and model adoption scale.
- https://huggingface.co/api/models/ibm-granite/granite-guardian-3.2-5b recorded 2026-08-13
1,837 downloads in the trailing 30 days for ibm-granite/granite-guardian-3.2-5b
Capability
4 medium confidenceOne of the broadest open guardrails: standard harm taxonomy plus RAG-specific groundedness/hallucination checks.
- https://huggingface.co/ibm-granite/granite-guardian-3.2-5b recorded 2026-08-13
Card enumerates Harm, Social Bias, Jailbreaking, Violence, Profanity and Sexual Content, plus RAG hallucination risks - context relevance, groundedness and answer relevance - and function-calling risk detection in agentic workflows.
Verified 2026-08-13