Guardrails

Guardrails are checks you configure on a policy to constrain what its callers can do. They are defined per policy and apply only to that policy.

agent network guardrails on a policy

Model Allowlist

Restrict a policy to a specific set of models. Requests for any other model are denied.

Prompt Capture

Optionally store request prompts and response completions on logged requests. Prompt capture only runs when both the account-level prompt collection setting and a policy guardrail enable it — see Log Collection & Retention.

PII Redaction

When capture is enabled, you can strip personally identifiable information from prompts and completions before they're stored. Effective redaction is the OR of the account setting and the guardrail setting.

Configuring Guardrails

Open the policy's Guardrails tab when creating or editing a policy and enable the checks you want. They take effect for that policy only.