A guardrail that cannot be talked out of
A check that reads the same context it is guarding shares the context's compromise. The useful ones run on the action, outside the conversation, on values the attacker never touched.
Not yet
This one opens once you have finished Memory and RAG.
Progress is kept against your account, so finishing a module needs one. Everything up to here is open without.