# AI guardrails

> Input and output policies per agent (prompt-injection heuristics, PII redaction, topic deny lists, a tool depth limit) and a decision log; a blocked check records guardrail.blocked. Only the service role reads and writes them.

- Category: AI
- Module: `ai-guardrails`
- Modes: `managed`
- Docs: https://bettersupabase.com/docs/blocks/ai-guardrails
- Page: https://bettersupabase.com/blocks/ai-guardrails

## Install

```bash
npx better-supabase add ai-guardrails
```

## Configure

Add the block to `better-supabase.config.ts`:

```ts
import { defineConfig } from "better-supabase/config";

export default defineConfig({
  blocks: {
    // Modes: "managed". The default is "managed".
    "ai-guardrails": { mode: "managed" },
  },
});
```

## Client

The block has no React entry yet. Its server-side TypeScript is in `better-supabase/blocks/ai-guardrails`.

## Events

- `guardrail.blocked`

## Related blocks

Works with: [outbox](https://bettersupabase.com/blocks/outbox.md), [audit](https://bettersupabase.com/blocks/audit.md)