extract gated 0 0

marslabucla/XGuard-Train

published by @marslabucla

Alignment dataset tracked in the /datasets sub-catalog.

Lifetime downloads
3.3K
Last 30 days
148
Likes
13
Size
642.3 MB
Created on HF
2025-04-13
Age
1 years ago

Description

𝕏Guard-Train: A Large-Scale Dataset for Multi-Turn LM Safety

A comprehensive multi-turn safety dataset for improving conversational AI defenses against sophisticated jailbreaking attacks.

Dataset Details

Website: https://x-teaming.github.io/

Repository: https://github.com/salman-lui/x-teaming

Paper: https://huggingface.co/papers/2504.13203

Dataset Description

This dataset consists of 30,695 multi-turn conversations, with complete… See the full description on the dataset page: https://huggingface.co/datasets/marslabucla/XGuard-Train.

Tags

task_categories:text-generationtask_categories:text-classificationsize_categories:10K<n<100Kformat:jsonmodality:textlibrary:datasetslibrary:pandaslibrary:mlcroissantlibrary:polarsarxiv:2504.13203region:us

README current version from Hugging Face


size_categories:

  • 10K<n<100K
    pretty_name: 𝕏Guard-Train
    task_categories:
  • text-generation
  • text-classification

𝕏Guard-Train: A Large-Scale Dataset for Multi-Turn LM Safety

A comprehensive multi-turn safety dataset for improving conversational AI defenses against sophisticated jailbreaking attacks.

Dataset Details

Dataset Description

This dataset consists of 30,695 multi-turn conversations, with complete attack-refusal pairs that enable robust multi-turn safety training.

Dataset Sources

We constructed 𝕏Guard-Train by proportionately sampling 10,000 harmful behaviors from WildJailbreak's vanilla harmful category.
For each harmful behavior, our planner generated between two to five distinct attack plans, resulting in diverse attack trajectories incorporating various personas, contexts, and conversation approaches.
We executed these plans using the complete 𝕏-Teaming pipeline, with GPT-4o, Gemini 2.0 Flash, and Deepseek V3 as target models, and Qwen-2.5-32B-IT handling both attack execution and TextGrad optimization.
The pipeline refined attacker queries when verification scores decreased and dynamically adjusted plans that failed to achieve their harmful targets.
This process resulted in highly effective jailbreaking conversations with an average of 5.10 turns, where one turn represents an attacker prompt and target model response pair.
For successful jailbreaks, we replaced harmful model responses with carefully crafted helpful refusals.

Uses

This dataset is intended to be used for fine-tuning LLMs to make them resistant against advanced multi-turn jailbreaking attacks without sacrificing performance.

Dataset Structure

The dataset is presented as a single file without train, validation, or test splits. The conversations are given in ShareGPT format, with an even number of messages, and each message alternating between "human" and "gpt" roles, like so:

[
  {
    "conversations": [
      {"from": "human", "value": "Hello world"},
      {"from": "gpt", "value": "Foobar"}
    ]
  },
  {
    "conversations": [
      // ...
    ]
  }
]

README history 8 revisions

Every night we snapshot the README of every dataset in the catalog. When the SHA changes we archive the new version and diff it against the last. This is the evolving thought record of the alignment-data field: what the author decided to say about the corpus, and how that framing shifted over time.

  1. 2025-04-24Update README.md2e8b4bf2.7 KB
    Loading...
  2. 2025-04-24Add task category, link to paper (#2)7192e872.7 KB
    Loading...
  3. 2025-04-15Update README.mda085ef12.6 KB
    Loading...
  4. 2025-04-14Update README.md1cc67a02.6 KB
    Loading...
  5. 2025-04-14Update README.md84ca2d32.5 KB
    Loading...
  6. 2025-04-13Create README.mdcf8118d2.5 KB
    Loading...
  7. 2025-04-13Upload xguard-train.json3b9f8bf0 B
    Loading...
  8. 2025-04-13initial commitbf31c070 B
    Loading...

Used by abliterated models none yet

No abliterated models in our catalog have declared this dataset in their YAML metadata yet. This can mean the dataset is used but not declared, is used outside abliteration workflows, or is new. The link will populate automatically as models are indexed.

Community discussions 3 threads · 2 open · 4 comments

Threads posted by the community on Hugging Face: bug reports, questions about usage, pull requests on the README, license clarifications. Click any thread to expand and read the full conversation inline. Newest first.

  1. 2025-08-08Please provide a licenseopen2 💬#3
    Loading...
  2. 2025-04-23PRAdd task category, link to papermerged1 💬#2
    Loading...
  3. 2025-04-14[bot] Conversion to Parquetopen1 💬#1
    Loading...

Related datasets same stage · extract

Read further

Repository

Download the dataset

Gated dataset. You need to accept the author's terms on Hugging Face before downloading. Visit the repository, click Agree and access repository, then log in locally with huggingface-cli login and use one of the snippets below.

Copy any of these snippets into your notebook or terminal. All three fetch directly from Hugging Face using your own credentials.

Recommended: datasets library (Python)
from datasets import load_dataset
ds = load_dataset("marslabucla/XGuard-Train")
Raw snapshot (Python)
from huggingface_hub import snapshot_download
snapshot_download(repo_id="marslabucla/XGuard-Train", repo_type="dataset")
git clone (requires git-lfs)
git clone https://huggingface.co/datasets/marslabucla/XGuard-Train
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration