Manage guardrails

Each Sentinel runs its own guardrail policy — the guardrails applied to inbound traffic, in the order you set. Admins manage that policy per gateway from the SUPERWISE® app, so different Sentinels can enforce different rules. Read-only users can view the policy but not change it.

Open a Sentinel and go to the Guardrails tab. The input pipeline lists the active guardrails in execution order, each showing its action and average added latency.

Add or remove a guardrail

• Add — click Add guardrail and pick from the catalog: Secret & credential detection, PII redaction, and Rudeness & toxicity.
• Remove — use the delete icon on a guardrail; it's marked Removed until you save (click Restore to undo).

Edit a guardrail

Select a guardrail to open its editor, where you set its behavior and parameters.

Action when triggered

Choose what happens when the guardrail matches:

• Remediate — fix and forward. Each matched value is replaced with your Replacement text (default REDACTED) and the request continues to the model.
• Block — reject the request. Set the Error message returned to the caller.

Parameters

Some guardrails expose parameters. PII redaction lets you choose the detected categories — pick exactly which identifier types to scan for (see PII redaction).

Order the pipeline

Guardrails run in order on each request. Drag a guardrail to reposition it in the input pipeline — for example, to redact secrets before running other checks.

Apply and save

Edits are staged in two steps:

1. In a guardrail's editor, click Apply changes to stage them.
2. On the Sentinel page, click Save changes to publish the policy — or Discard to revert.