In one way you’re right, of course, but if you look at Fable, for example, that uses similar guardrails, it’s downright impossible to discuss these things.

It is my understanding that having a secondary model whose sole purpose is to trigger based on guardrails is the way this is usually done.