Figure 4:

Safety–utility tradeoff on B200 (panel a) and MIMICEXT200 (panel b), N=200 per cell. Marker shape = configuration (× C0, △ C1, ◦ C2, ⋄ C2+SRP); color = base model. The ideal region is high allow rate with low deploy VR (bottom-right). Supervised configurations cluster near the origin; SRP shifts Qwen 7B toward higher allow rates without increasing VR.