direction on every call (input before
the model, output after). Defaults to input if omitted.
Coverage
Ask —
status is advisory: nothing prompts anyone unless your code does.
Use it when the model call lives in your JavaScript or TypeScript code and
the policy decision needs application context. Not as your only defence when
you need a guarantee that does not depend on every developer remembering the
check.
⚠️ TrustGuard returns the verdict, your code enforces it. Ignoring
transformedPayload silently disables redaction: the call succeeds, the finding
is recorded, and the unmasked prompt reaches the model.
Limits. Coverage is per call site — see
Node middleware to cover
by configuration instead.
Full comparison: Coverage.