Mistral AI released Shieldstral as an open-weights multimodal safety classifier.
This 3-billion parameter model runs on a single 16GB NVIDIA GPU. It accepts plain-language policies at inference time instead of fixed weights. Shieldstral frames content moderation as a policy-adaptive question-answering task.
The system processes three parts: an instruction, a yes/no query, and the content to judge. It returns a continuous safety score rather than a simple binary label. This allows users to rank or threshold results based on confidence levels.
Shieldstral matches or outperforms guardrail models up to seven times its size. It handles text, images, and combined text-image pairs in one interface. The model was trained on heterogeneous data from multiple sources.
Researchers unified datasets by converting them into a single instruction-query-document format. They taught the model to discriminate between similar policies instead of memorizing labels. Visual safety data came from general-purpose image datasets with careful filtering.
The team merged checkpoints using LoRA fine-tuning and SLERP interpolation. Shieldstral is part of the Open Secure AI Alliance with NVIDIA. It is available for download under the Apache 2.0 license.
Why it matters
You can adapt safety policies instantly without retraining large models. This saves time and reduces costs for organizations deploying agent systems.



