Unrestricted. Not ungoverned.
Decide what your model is allowed to do, and prove it. Policy-as-code rules with a reason code on every decision.
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
“Draft a PoC for CVE-2024-3094 for our red team.”
matched authorized offsec policy
“Summarize patient chart #38291.”
PHI masked before reaching model
“Help me harass my coworker.”
matched harassment-block rule
“I'll sue you if you don't refund me right now!”
tone softened to civil
“List recon techniques for an authorized engagement.”
matched authorized offsec policy
“Differential for chest pain in 58M smoker.”
PHI redacted, clinical reasoning ok
“How can I dox someone on Twitter?”
matched harm-to-others rule
“this is the worst service ever, you idiots.”
insults removed, intent preserved
Five ways the gateway can respond.
Allow
The request matched an authorized policy and the model answers normally. Default for in-scope traffic.
Refuse
Block the request with a structured reason code. Use for out-of-scope content (CSAM, explicit violence, regulated categories).
Rewrite
Sanitize the prompt or the response. Harassment becomes civil-tone feedback; prohibited terms become safe variants. Keep the conversion, drop the violation.
Redact
Strip names, MRNs, emails, phone numbers, or any matching pattern before the model sees them, or before the response is returned to the user.
Escalate
Route to a human review queue. Use for high-risk signals like self-harm cues, CSAM indicators, or threats. The rest of the conversation continues.
Write the rules. Version them like you version your app.
Policies live in a typed config language, in your repo. Pull requests, code review, shadow mode, and canary rollouts. All the workflows you already use for application code.
rule "cybersec-research" { when context.project == "offsec" allow tags: ["exploit-dev", "recon"] require audit: siem rewrite tags: ["pii"] with "redact" refuse tags: ["csam"] reason: "policy-csam" }
Every call gets a reason code. Every reason code streams to your SOC.
No more best-guess audit reviews. The gateway emits a structured decision object on every request: the policy that matched, the outcome, the inputs, the reason code, and the audit destination.
{ "ts": "2026-05-27T14:32:08Z", "policy": "cybersec-research", "outcome": "allow", "reason": "matched_authorized_offsec", "request": "req_01H9...", "user": "u_offsec_482", "tags": ["exploit-dev"], "audit_to": "siem://splunk.prod" }
Every decision streams to where your security team already looks.
Pick one or many. The gateway ships decision logs to your SOC stack with HMAC signatures, idempotency keys, and exponential-backoff retries. No bespoke audit pipeline.
outcome: allow
reason: matched_authorized_offsec
request: req_01H9...
Splunk
HEC ingest with per-policy index.
Datadog
Logs + decision tags for dashboards and monitors.
Elastic
Filebeat-compatible NDJSON for ES / Kibana.
Amazon S3
Append-only JSONL with SSE-KMS.
Azure Monitor
Log Analytics workspace + Sentinel integration.
Custom webhook
POST to any HTTPS endpoint. HMAC-signed, retries on failure.
Roll out safely. Catch regressions before they ship.
Shadow mode
Run a new policy in shadow against live traffic without affecting users. Compare outcomes against the current policy.
Canary rollout
Promote to a percentage of traffic. Roll back instantly if the new outcomes don't match what you expect.
Enforce
When the canary is green, enforce the new policy as the default. Every decision is still logged with the policy version that produced it.
Free tier. Pay-as-you-go. Enterprise.
Start with shared infrastructure on the Builder plan. Dedicated workers and custom audit destinations on Team and Enterprise.
Try the model that doesn’t say no.
Free tier. OpenAI-compatible. Policy Gateway when you scale.