Custom and vendor guardrails
Besides Garden cards (BUILTIN), the Guardrails tab can create two other kinds.
Custom
A sandboxed script that can allow, block or modify the prompt or completion. Set mode to PRE, POST or BOTH.
Use custom scripts for org-specific patterns, allowlists, or transformations that are not in the Garden.
Vendor
External scanners. Fail-open is optional (if the vendor is down, the step passes).
| Type | What it calls |
|---|---|
OPENAI_MODERATION | OpenAI Moderation API, using a stored provider credential |
AZURE_CONTENT_SAFETY | Azure AI Content Safety |
WEBHOOK | Your HTTPS endpoint |
Vendor and custom steps show as informational in the Playground (the dry-run engine evaluates built-ins). They run for real traffic once attached through a policy.
Directory
The Guardrails tab lists every instance: name, kind, mode, enabled, and how many policy steps use it. Disable an instance to stop it everywhere it is referenced without deleting the policy.