One prompt-injection attack, 256 attempts, two configurations
Tested against qwen3-coder:30b: the model directly vs. the same model behind the containerized guardrail.
- Screens prompts with a DeBERTa prompt-injection classifier
- Checks responses for data leaks with Presidio
- Ships as a container that sits inline in front of the model
Result from testing, not a production guarantee.