DUET Improves LLM Compliance with Runtime Prohibitions

Zihan Li, Feifei Li, Wenhui Que· August 18, 2026 View original

Key takeaways

  • DUET is a token-selective on-policy distillation method for LLM prohibition compliance.
  • It uses a dual-teacher approach to isolate the causal effect of prohibitions at a token level.
  • DUET achieves high violation compliance while preserving normal LLM utility.
  • This method is particularly effective for dynamic, runtime-injected enterprise policies.

Who benefits

BFSIHealthcareLegalGovernmentTechnology

Summary

DUET, a new token-selective on-policy distillation method, significantly enhances Large Language Model (LLM) compliance with runtime-injected prohibitions. It uses a dual-teacher approach to isolate and learn from per-token disagreement, achieving high violation compliance while preserving utility.

Large Language Models (LLMs) deployed in real-world settings often need to adhere to dynamic, runtime-injected prohibitions, such as enterprise policies or PII redlines. Existing training methods like SFT and DPO are not well-suited for these token-localized, variable constraints. Researchers have developed DUET (Dual-Teacher On-Policy Distillation), a novel method for improving LLM compliance. DUET employs two identical-weight teachers: one that sees the prohibition and one that does not. Their per-token disagreement effectively isolates the prohibition's causal effect, providing a clean supervision signal. This disagreement drives signal cleaning and preference-directed learning, pushing the student model away from non-compliant tokens and towards compliant ones. Evaluated on an industrial benchmark, DUET achieved 72.3-85.2% violation compliance across Qwen models while retaining 88-93% normal utility, significantly outperforming other distillation baselines.

Why it matters

This method is crucial for safely deploying LLMs in enterprise environments, ensuring they adhere to dynamic policies and sensitive data rules without sacrificing performance on general tasks.

How to implement this in your domain

  1. 1Investigate DUET for fine-tuning LLMs to comply with specific enterprise policies and data governance rules.
  2. 2Implement token-selective distillation techniques to improve the safety and reliability of your LLM deployments.
  3. 3Develop internal benchmarks to test LLM compliance against dynamic, runtime-injected prohibitions.
  4. 4Explore dual-teacher architectures for isolating and learning from specific behavioral signals in LLMs.

Original post by Zihan Li, Feifei Li, Wenhui Que

"arXiv:2608.14644v1 Announce Type: new Abstract: Real-world LLM deployments increasingly rely on runtime-injected prohibitions--enterprise policies, PII redlines, tool boundaries--that vary per request and per tenant. Conventional post-training is structurally ill-suited: SFT hide…"

View on X

Originally posted by Zihan Li, Feifei Li, Wenhui Que on X · view source

Want to go deeper?

Turn these trends into skills with Learnijoy's hands-on AI & tech courses.

Explore courses