{"id":32953,"date":"2026-02-02T12:00:00","date_gmt":"2026-02-02T11:00:00","guid":{"rendered":"https:\/\/salvadorvilalta.com\/?p=32953"},"modified":"2026-02-06T18:43:10","modified_gmt":"2026-02-06T17:43:10","slug":"uncontrolled-iwr-why-do-you-need-guardrails-nowia-without-control-why-you-need-guardrails-now","status":"publish","type":"post","link":"https:\/\/salvadorvilalta.com\/en\/uncontrolled-iwr-why-do-you-need-guardrails-nowia-without-control-why-you-need-guardrails-now\/","title":{"rendered":"Uncontrolled AI? Why do you need guardrails now"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Imagine yourself driving your car up a mountain road without guardrails in the most dangerous curves. The speed may be cool, but the risk of something bad happening to you can be very high, even deadly. This is the situation we find ourselves in today in the field of AI: we go at full speed, but if we don’t set limits, an accident is only a matter of time. <\/p>

This week, I would like to explain to you what AI guardrails are, why they are so necessary (I would say essential), and how they are applied in practice, without impairing the performance of AI language models and AI Agents.<\/p>

So that you don’t get lost, I will try to be as didactic as possible and give you some real-life examples. Let’s start… <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

What the hell are guardrails in AI?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Perhaps the best simile could be that of the protections on the road, the guardrails<\/strong>. They are not there to annoy you on your trip, but to make sure you don’t go over the edge. <\/p>

In AI, we’re talking about measures (filters, rules, watchdog models…) that prevent systems from doing or saying things they shouldn’t. And we’re not just talking about obvious outrages like insults or illegal content, but any deviation that could jeopardize ethics, security, or even a company’s reputation. There are plenty of real examples: a chatbot that, after being manipulated, sells cars for $1; another that gives recipes for homemade bombs if you give it the right “prompt”.<\/p>

And the worst thing is that, without barriers, these models are so convinced that they are helping.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Why are they more necessary than ever?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Because AI is no longer limited to answering trivial questions, it now generates texts that seem to be written by humans: it serves customers, advises on health, speaks in a natural voice, and will soon be making business decisions.<\/p>

Now, mistakes are no longer funny; they are dangerous. For example, if an artificial intelligence gives wrong financial advice or reveals confidential information, the problem is no longer technical: it is legal and reputational. This is why guardrails are not optional; they are literally mandatory. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

How are these brakes installed?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Here comes the interesting part. There are several ways to build guardrails, from the most basic to the most sophisticated. I explain it as if we were building an onion of layers of protection: <\/p>

  1. Direct filters<\/strong>: the simplest. Prohibited words, sensitive expressions, and numbers that cannot be said (such as cards or accounts). They are applied before or after the template, like a spam filter. <\/li>
  2. Semantic control:<\/strong> instead of words, measure the meaning. If your question sounds too much like something violent, sexual or out of context… block. It requires a little more intelligence, but it’s more effective. <\/li>
  3. Judge model:<\/strong> a “mini-me” that examines the query and determines whether it is eligible. If it gives the green light, the main model responds. If not, it stops. It’s like having an invisible moderator. <\/li>
  4. Internal instructions (prompt engineering):<\/strong> tell the model “hey, you only talk about hotels, and if they ask you anything else, say you can’t help”. Easy to apply, but also easy to mock if not reinforced with more layers. <\/li><\/ol>

    In practice, they are all combined. Like slices of Swiss cheese: each one has holes, but together they block the passage. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\"Guardrails\t\t\t\t\t\t\t\t\t\t\t
    Image generated with Gemini<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    And with voice? Isn't everything more difficult? <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Undoubtedly, since voice introduces new challenges: everything happens in real time, you can’t check before it rings, and attacks can come disguised as an urgent tone or fake voice.<\/p>

    Therefore, the gatekeepers in this area must: review the content before converting it into audio; transcribe the input and analyze it as if it were text; detect suspicious emotions or urges; prevent the system from reacting solely to voice pressure; and verify identity (to avoid fraud from voice deepfakes).<\/p>

    A practical example could be a reservation assistant in a restaurant that detects insults, does not cancel reservations out of policy and blocks personal data, such as cards. All that in seconds and without blocking itself. Undoubtedly, magic <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t
    <\/div>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Are there tools to implement them?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    As you well know, there are tools for almost everything. Some of them: <\/p>