Common Guardrails
·Bryan Lai
Common Guardrails
Guardrails fail when teams treat them as one filter.
Good systems layer checks before, during, and after the model responds.
- Relevance: Is the answer still on topic?
- Safety: Is the user trying to jailbreak the system or inject instructions?
- PII: Did the model expose personally identifiable information?
- Moderation: Is the input or output hateful, violent, sexual, or otherwise unsafe?
- Tool risk: Is the tool call safe to run now, or should a human approve it first?
- Rules: Are there known bad patterns to block with regex, blocklists, or SQL checks?
- Output: Would this response harm the user, the business, or the brand?
Heuristics
- Focus on data privacy and content safety.
- Add guardrails after real failures, not imaginary ones.
- Keep the user experience usable.
- Tighten the rules as the agent gets more power.