Gemma-SEA-LION-Guard-v2-E2B

Last updated: 2026-10-21

SEA-LION-Guard is a collection of safety-focused Large Language Models (LLMs) designed specifically for the Southeast Asia (SEA) region. Alongside releasing the open model weights, we also offer a single API endpoint that exclusively serves this decision-based finetuned Gemma model. You can generate an API key to access this model at sea-lion api key manager.

Model Details

SEA-LION stands for Southeast Asian Languages In One Network and is a collection of Large Language Models (LLMs) which have been pretrained and instruct-tuned for the Southeast Asia (SEA) region.

Model Description

Unlike the SEA-Guard (renamed as SEA-LION-Guard v1) series, which is designed exclusively for Content Moderation, the SEA-LION-Guard-v2 series supports both Content Moderation and Action Governance.

Key enhancements in SEA-LION-Guard-v2 over SEA-Guard:

• Multi-turn Conversation Evaluation: Evaluates safety across multi-turn interactions.
• Bring Your Own Policy (BYOP): Allows users to define and enforce their own sets of safety rules and policies.
• Tool Interaction Evaluation: Evaluates tool calls and tool responses to ensure safe and policy-compliant agent behavior.

For tokenization, the model employs the default tokenizer used in Gemma-4-E2B-IT.

• Developed by: AI Products Pillar, AI Singapore
• Funded by: National Research Foundation Singapore
• Shared by: AI Products Pillar, AI Singapore
• Context length: 128K tokens
• Language(s): Burmese, English, Indonesian, Filipino, Malay, Tamil, Thai, and Vietnamese
• License: MIT
• Base model: Gemma-4-E2B-IT

Intended Uses and Limitations

This model is optimized to function as a decision model that produces structured probabilistic judgments rather than generating free-form text. it was fine-tuned to answer three core questions: content_moderation, which assigns individual probability scores (0.0–1.0) to the categories safe, sensitive, and unsafe; rule_violation, which estimates the probability (0.0–1.0) that the input violates the specified rules; and rule_applicability, which estimates the probability (0.0–1.0) that the specified rules apply to the input. However, users must be aware that the model is subject to the limitations common to generative AI, including the potential to hallucinate and produces ungrounded probability. Due to these inherent risks, human oversight is advised, and the model’s outputs should not be treated as absolute determinations without secondary verification.

Uses

How to Get Started with the Model

Install decision interface server

pip install decision-ui

Deploy the model using any inference engine, e.g., vLLM.

vllm serve aisingapore/Gemma-SEA-LION-Guard-v2-E2B \
--host localhost \
--port 8000

Create decision inference server

decision-ui serve http://localhost:8000/v1 \
--port 9000

Compatible with SystemOne API and OpenAI's Decisions API

from typesafe_sdk import Choice, Noul, TypeSafeClient

with TypeSafeClient(base_url="http://localhost:9000/v1", api_key="EMPTY") as client:
    decision = client.system_one(
        model="aisingapore/Gemma-SEA-LION-Guard-v2-E2B",
        state={"conversation":
            [
                {"role": "user", "content": "..."},
                {"role": "assistant", "content": "..."},
            ]
        },
        questions={
            "content_moderation": Choice(
                instructions="Is the latest conversation turn safe, sensitive, or unsafe?",
                criteria={"safe": None, "sensitive": None, "unsafe": None},
            ),
            "rule_applicability": Noul(
                instructions=(
                  "Is the latest conversation turn applicable to the following rule?\n"
                  "- <your_rule>"
            ),
            "rule_violation": Noul(
                instructions=(
                  "Does the latest conversation turn violate the following rule?\n"
                  "- <your_rule>"
                ),
            ),
        },
   )
print(decision.choices["content_moderation"].probabilities)
print(decision.nouls["rule_applicability"].noul)
print(decision.nouls["rule_violation"].noul)

from openai import OpenAI

client = OpenAI(base_url="http://localhost:9000/v1", api_key="EMPTY")

decision = client.decisions.create(
    model="aisingapore/Gemma-SEA-LION-Guard-v2-E2B",
    input=[
        {"role": "user", "content": "..."},
        {"role": "assistant", "content": "..."},
    ],
    questions=[
        {
            "type": "choice",
            "name": "content_moderation",
            "instructions": "Is the latest conversation turn safe, sensitive, or unsafe?",
            "choices": [
                {"value": "safe"},
                {"value": "sensitive"},
                {"value": "unsafe"},
            ],
        },
        {
            "type": "predicate",
            "name": "rule_applicability",
            "instructions": (
                "Is the latest conversation turn applicable to the following rule?\n"
                "- <your_rule>"
            ),
        },
        {
            "type": "predicate",
            "name": "rule_violation",
            "instructions": (
                "Does the latest conversation turn violate the following rule?\n"
                "- <your_rule>"
            ),
        },
    ],
)

answers = {a.name: a for a in decision.answers}

print({p.value: p.probability for p in answers["content_moderation"].probabilities})
print(answers["rule_applicability"].probability)
print(answers["rule_violation"].probability)

Evaluation

Testing Data, Factors & Metrics

We use SEA-SafeguardBench to evaluate our SEA-LION-Guard-v2.

Metrics

AUPRC is the primary metric to evaluate the safety classification of our models.

Comparison Table

Universal Safety vs SEA-Specific Safety performance Comparative AUPRC performance across 8 SEA languages and safety categories

Uses

Bias, Risks, and Limitations

It is important for users to be aware that our model exhibits certain limitations that warrant consideration. Although optimized to estimate probability scores for content_moderation, rule_violation, and rule_applicability, the model can still hallucinate or occasionally produce ungrounded score distributions. Users should exercise caution in interpreting and validating the model's outputs—particularly near decision thresholds—due to potential biases and underlying generative inconsistencies.

Out-of-Scope Use

In no event shall the authors be held liable for any claims, damages, or other liabilities arising from the use of the released weights and codes.

Citation

If this work contributes to yours, please cite our initial article at

BibTeX:

@misc{tasawong2026seaguardculturallygroundedmultilingual,
      title={SEA-Guard: Culturally Grounded Multilingual Safeguard for Southeast Asia}, 
      author={Panuthep Tasawong and Jian Gang Ngui and Alham Fikri Aji and Trevor Cohn and Peerat Limkonchotiwat},
      year={2026},
      eprint={2602.01618},
      archivePrefix={arXiv},
      primaryClass={cs.CL},
      url={https://arxiv.org/abs/2602.01618}, 
}

Team

AI Products Pillar, AI Singapore

Acknowledgement

This project is supported by the National Research Foundation Singapore and Infocomm Media Development Authority (IMDA), Singapore under its National Large Language Model Funding Initiative.

Contact

sealion@aisingapore.org