Content policy

Inbound

Messages are screened for attempts to extract configuration. Blocked messages never reach the model.

Outbound

Model responses are scanned and any restricted value is replaced with [redacted] before the response is returned.

Both filters operate on the literal text of the message.