Prompt Injections blockieren.
Personenbezogene Daten maskieren.

version: "1.0"

name: order-support
description: Answers questions about orders, returns and delivery
model: connic/gpt-5.6-terra
system_prompt: |
  Help customers with their orders, returns and delivery.
tools:
  - orders.get_order
  - orders.start_return
guardrails:
  input:
    - type: prompt_injection
      mode: block
      config:
        rejection_message: "I can help with orders, returns and delivery."
    - type: pii
      mode: redact
      config:
        entities: [email, phone, credit_card]
  output:
    - type: system_prompt_leakage
      mode: block
    - type: data_exfiltration
      mode: block
      config:
        allowed_domains: [shop.example.com]
    - type: custom
      name: order-scope
      mode: block

import re
from connic import GuardrailResult

ORDER_ID = re.compile(r"\bORD-\d{6}\b")


def check(content: str, context: dict) -> GuardrailResult:
    """Block replies that mention another customer's orders."""
    own_orders = set(context.get("customer_order_ids", []))
    foreign = sorted(set(ORDER_ID.findall(content)) - own_orders)

    if foreign:
        return GuardrailResult(
            passed=False,
            message=f"Reply mentions orders outside this account: {', '.join(foreign)}",
        )
    return GuardrailResult(passed=True)