Verification · Intent and spec conformance · Output guardrails
Policy rails
Block outputs that leak secrets, change protected files or exceed scope.
How to build it
- List the protected paths and the actions the bot may not perform.
- Scan each output for secret patterns and block the output on a match.
- Log every blocked output with the rule it broke, for review.
Signals in a repository
- A Colang rails directory for NeMo Guardrails with input and output rail definitions.
- A config.yml that lists the input and output rails for the bot.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.