If fix this code gets by the guardrails, they are effectively using rules based classifiers (or llm as a judge on the prompt)