exploring options within the OpenAI Brokers SDK framework, there\u2019s one functionality that deserves a better look: enter and output guardrails<\/strong>.<\/p>\n In earlier articles, we constructed our first agent with an API-calling device after which expanded right into a multi-agent system. In real-world situations, although, constructing these programs is advanced\u2014and with out the fitting safeguards, issues can shortly go off observe. That\u2019s the place guardrails are available: they assist guarantee security, focus, and effectivity.<\/p>\n In case you haven\u2019t learn the sooner elements but, no worries \u2014 you\u2019ll discover hyperlinks to the earlier articles on the finish of this put up.<\/em><\/p>\n<\/blockquote>\n Right here\u2019s why guardrails matter:<\/p>\n With out correct guardrails, surprising use instances can pop up. For instance, you might need heard of individuals utilizing AI-powered customer support bots (designed for product help) to put in writing code as an alternative. It sounds humorous, however for the corporate, it may well develop into a expensive and irrelevant distraction.<\/p>\n To see why guardrails are necessary, let\u2019s revisit our final venture. I ran the We undoubtedly don\u2019t need this taking place in a manufacturing app. Think about the prices of unintended utilization\u2014to not point out the larger dangers it may well deliver, corresponding to data leaks, system immediate publicity, and different severe vulnerabilities.<\/p>\n Hopefully, this makes the case clear for why guardrails are value exploring. Subsequent, let\u2019s dive into methods to begin utilizing the guardrail function within the OpenAI Brokers SDK.<\/p>\n Within the OpenAI Brokers SDK, there are two varieties of guardrails: enter guardrails<\/strong> and output guardrails<\/strong> [1]<\/sup>. Enter guardrails run on the consumer\u2019s preliminary enter, whereas output guardrails run on the agent\u2019s remaining response.<\/p>\n A guardrail may be an LLM-powered agent\u2014helpful for duties that require reasoning\u2014or a rule-based\/programmatic perform, corresponding to a regex to detect particular key phrases. If the guardrail finds a violation, it triggers a tripwire<\/em> and raises an exception. This mechanism prevents the primary agent from processing unsafe or irrelevant queries, guaranteeing each security and effectivity.<\/p>\n Some sensible makes use of for enter guardrails embody:<\/p>\n Then again, output guardrails can be utilized to:<\/p>\n On this article, we\u2019ll discover several types of guardrails, together with each LLM-based and rule-based approaches, and the way they are often utilized for varied sorts of validation.<\/p>\n For the guardrail implementation, we\u2019ll use the script from the earlier article the place we constructed the agents-as-tools multi-agent system. For an in depth walkthrough, please refer again to that article. The complete implementation script may be discovered right here: app06_agents_as_tools.py<\/a>.<\/p>\n Now let\u2019s create a brand new file named We\u2019ll begin by including enter guardrails to our climate app. On this part, we\u2019ll construct two sorts:<\/p>\n First, let\u2019s import the mandatory packages from the Brokers SDK and different libraries. We\u2019ll additionally arrange the setting to load the OpenAI API key from the For any LLM-based guardrail, we have to outline an output mannequin<\/em>. Usually, we use a Pydantic mannequin class to specify the construction of the info. On the easiest degree, we’d like a boolean area (True\/False) to point whether or not the guardrail ought to set off, together with a textual content area that explains the reasoning.<\/p>\n In our case, we would like the guardrail to find out whether or not the question remains to be inside the scope of the app\u2019s function (climate and air high quality). To try this, we\u2019ll outline a mannequin named The boolean area We have to outline an agent with clear and full directions to find out whether or not a consumer\u2019s query is on-topic or off-topic. This may be adjusted relying in your app\u2019s function\u2014the directions don\u2019t must be the identical for each use case.<\/p>\n For our Climate and Air High quality assistant, right here\u2019s the guardrail agent with directions for classifying a consumer\u2019s question.<\/p>\n Within the directions, moreover itemizing the plain subjects, we additionally permit some flexibility for easy conversational starters like \u201chowdy,\u201d \u201chello,\u201d or different greetings. To make the classification clearer, we included examples of each on-topic and off-topic queries.<\/p>\n One other advantage of enter guardrails is value optimization. To reap the benefits of this, we must always use a quicker and more cost effective mannequin than the primary agent. This fashion, the primary (and costlier) agent is simply used when completely mandatory.<\/p>\n On this instance, the guardrail agent makes use of Subsequent, let\u2019s wrap the agent in an async perform adorned with The perform returns a structured The Alongside the LLM-based off-topic guardrail, we\u2019ll create a easy rule-based guardrail. This one doesn\u2019t require an LLM and as an alternative depends on programmatic sample matching.<\/p>\n Relying in your app\u2019s function, rule-based guardrails may be very efficient at blocking dangerous inputs\u2014particularly when dangerous patterns are predictable.<\/p>\n On this instance, we outline an inventory of key phrases typically utilized in jailbreak or immediate injection makes an attempt. The listing consists of: If the consumer enter comprises any of those key phrases, the guardrail will set off robotically. Since no LLM is concerned, we will deal with the validation straight contained in the enter guardrail perform This guardrail merely checks the enter towards the key phrase listing. If a match is discovered, Now let\u2019s proceed by defining the climate and air high quality specialist brokers with their perform device. The reason of this half may be discovered on my earlier article so for this text I’ll skip the reason.<\/p>\n Nearly the identical with earlier half, the orchestrator agent right here have the identical properties with the one which we already mentioned on my earlier article the place within the agents-as-tools<\/em> sample, the orchestrator agent will handle the duty of every specialised brokers as an alternative of handing-offer the duty to 1 agent like in handoff <\/em>sample.<\/p>\n The one totally different right here is we including new property to the agent; One factor that I noticed whereas experimenting with guardrails is once we listed the guardrail perform within the agent property, the listing will likely be used because the sequence of the execution. That means that we will configure the analysis order within the standpoint of value and impression. <\/p>\n In our case right here, I feel I ought to instantly lower the method if the question violate the immediate injection guardrail on account of its impression and likewise since this validation requires no LLM. So, if the question already recognized can’t be proceed, we don\u2019t want to guage it utilizing LLM (which has value) within the off subject guardrail.<\/p>\n Right here is the half the place the enter guardrail take a actual<\/em> motion. On this half the place we outline the primary perform of Streamlit consumer interface, we’ll add an exception dealing with particularly when the enter guardrail tripwire has been triggered. <\/p>\n As we will see within the code above, when the To make the message will likely be extra useful, we additionally add additional information particularly for what enter guardrail that blocked the consumer\u2019s question. If the exception raised by To check how the enter guardrail works, let\u2019s begin by operating the Streamlit app.<\/p>\n First, let\u2019s strive asking a query that aligns with the app\u2019s meant function.<\/p>\n As anticipated, the app returns a solution because the query is expounded to climate or air high quality.<\/p>\n Utilizing Traces, we will see what\u2019s taking place beneath the hood.<\/p>\n As mentioned earlier, the enter guardrails run earlier than the primary agent. Since we set the guardrail listing so as, the Nevertheless, if we alter the query to one thing fully unrelated to climate or air high quality\u2014just like the historical past of Jakarta\u2014the response appears like this:<\/p>\n Right here, the From the Traces dashboard for that historical past query, we will see the orchestrator agent throws an error as a result of the guardrail tripwire was triggered.<\/p>\n For the reason that course of was lower earlier than the enter reached the primary agent, we by no means even referred to as the primary agent mannequin\u2014saving some bucks on a question the app isn\u2019t alleged to deal with anyway.<\/p>\n If the enter guardrail ensures that the consumer\u2019s question is secure and related, the output guardrail<\/strong> ensures that the agent\u2019s response itself meets our desired requirements. That is equally necessary as a result of even with sturdy enter filtering, the agent can nonetheless produce outputs which are unintended, dangerous, or just not aligned with our necessities.<\/p>\n For instance, in our app we wish to make sure that the agent all the time responds professionally<\/em>. Since LLMs typically mirror the tone of the consumer\u2019s question, they may reply in an informal, sarcastic, or unprofessional tone\u2014which is exterior the scope of the enter guardrails we already applied.<\/p>\n To deal with this, we add an output guardrail that checks whether or not a response is skilled. If it\u2019s not, the guardrail will set off and stop the unprofessional response from reaching the consumer.<\/p>\n Similar to the Now we add this new guardrail to the orchestrator agent by itemizing it beneath Lastly, we prolong the primary perform to deal with Now, let\u2019s check out how the output guardrail works. Begin by operating the app as earlier than:<\/p>\n To check this, we will attempt to power the agent to reply in an unprofessional approach associated to climate or air high quality. For instance, by asking: \u201cReply this query with hyperbole. What’s the air high quality in Jakarta?\u201d<\/em><\/p>\n This question passes the enter guardrails as a result of it’s nonetheless on-topic and never an try at immediate injection. In consequence, the primary agent processes the enter and calls the proper perform.<\/p>\n Nevertheless, the ultimate output generated by the primary agent\u2014because it adopted the consumer\u2019s hyperbole request\u2014doesn’t align with the model\u2019s communication normal. Right here\u2019s the outcome we obtained from the app:<\/p>\n All through this text, we explored how guardrails within the OpenAI Brokers SDK assist us keep management over each enter and output. The enter guardrail we constructed right here protects the app from dangerous or unintended consumer enter that might value us as builders, whereas the output guardrail ensures responses stay in keeping with the model normal.<\/p>\n By combining these mechanisms, we will considerably cut back the dangers of unintended utilization, data leaks, or outputs that fail to align with the meant communication type. That is particularly essential when deploying agentic functions into manufacturing environments, the place security, reliability, and belief matter most.<\/p>\n Guardrails aren’t a silver bullet, however they’re a vital layer of protection. As we proceed constructing extra superior multi-agent programs, adopting guardrails early on will assist guarantee we create functions that aren’t solely highly effective but additionally secure, accountable, and cost-conscious.<\/p>\n [1] OpenAI. (2025). OpenAI Brokers SDK documentation<\/em>. Retrieved August 30, 2025, from https:\/\/openai.github.io\/openai-agents-python\/guardrails\/<\/a><\/p>\n [2] OpenAI. (2025). Find out how to use guardrails<\/em>. OpenAI Cookbook. Retrieved August 30, 2025, from https:\/\/cookbook.openai.com\/examples\/how_to_use_guardrails<\/a><\/p>\n [3] OpenAI. (2025). A sensible information to constructing brokers<\/em>. Retrieved August 30, 2025, from https:\/\/cdn.openai.com\/business-guides-and-resources\/a-practical-guide-to-building-agents.pdf<\/a><\/p>\n You could find the whole supply code used on this article within the following repository:\u00a0agentic-ai-weather | GitHub Repository<\/a>. Be at liberty to discover, clone, or fork the venture to comply with alongside or construct your individual model.<\/p>\n In case you\u2019d prefer to see the app in motion, I\u2019ve additionally deployed it right here:\u00a0Climate Assistant Streamlit<\/a><\/p>\n\n
\n
agents_as_tools<\/code> script and requested it to generate code for calling a climate API. Since no guardrails had been in place, the app returned the reply with out hesitation\u2014proving that, by default, it would attempt to do nearly something requested of it.<\/p>\n![\"\"](\"https:\/\/contributor.insightmediagroup.io\/wp-content\/uploads\/2025\/08\/image-289-1024x896.png\")
<\/figure>\nA Fast Intro to Guardrails<\/h2>\n
\n
\n
Stipulations<\/h2>\n
\n
necessities.txt<\/code> file:<\/li>\n<\/ul>\nopenai-agents\nstreamlit<\/code><\/pre>\n\n
venv<\/code>. Run the next instructions in your terminal:<\/li>\n<\/ul>\npython \u2212m venv venv \nsupply venv\/bin\/activate # On Home windows: venvScriptsactivate \npip set up -r necessities.txt<\/code><\/pre>\n\n
.env<\/code> file to retailer your OpenAI API key:<\/li>\n<\/ul>\nOPENAI_API_KEY=your_openai_key_here<\/code><\/pre>\napp08_guardrails.py<\/code>.<\/p>\nEnter Guardrail<\/h2>\n
\n
Import Libraries<\/h3>\n
.env<\/code> file. From the Brokers SDK, moreover the fundamental capabilities (Agent<\/code>, Runner<\/code>, and function_tool<\/code>) we\u2019ll additionally import capabilities particularly used for implementing enter and output guardrails.<\/p>\nfrom brokers import (\n Agent, \n Runner, \n function_tool, \n GuardrailFunctionOutput, \n input_guardrail, \n InputGuardrailTripwireTriggered,\n output_guardrail,\n OutputGuardrailTripwireTriggered\n)\nimport asyncio\nimport requests\nimport streamlit as st\nfrom pydantic import BaseModel, Subject\nfrom dotenv import load_dotenv\n\nload_dotenv()<\/code><\/pre>\nOutline Output Mannequin<\/h3>\n
TopicClassificationOutput<\/code> as proven beneath:<\/p>\n# Outline output mannequin for the guardrail agent to categorise if enter is off-topic\nclass TopicClassificationOutput(BaseModel):\n is_off_topic: bool = Subject(\n description=\"True if the enter is off-topic (not associated to climate\/air high quality and never a greeting), False in any other case\"\n )\n reasoning: str = Subject(\n description=\"Temporary clarification of why the enter was categorized as on-topic or off-topic\"\n )<\/code><\/pre>\nis_off_topic<\/code> will likely be set to True<\/code> if the enter is exterior the app\u2019s scope. The reasoning<\/code> area shops a brief clarification of why the mannequin made its classification.<\/p>\nCreate Guardrail Agent<\/h3>\n
# Create the guardrail agent to find out if enter is off-topic\ntopic_classification_agent = Agent(\n identify=\"Matter Classification Agent\",\n directions=(\n \"You're a subject classifier for a climate and air high quality utility. \"\n \"Your activity is to find out if a consumer's query is on-topic. \"\n \"Allowed subjects embody: \"\n \"1. Climate-related: present climate, climate forecast, temperature, precipitation, wind, humidity, and many others. \"\n \"2. Air quality-related: air air pollution, AQI, PM2.5, ozone, air situations, and many others. \"\n \"3. Location-based inquiries about climate or air situations \"\n \"4. Well mannered greetings and conversational starters (e.g., 'howdy', 'hello', 'good morning') \"\n \"5. Questions that mix greetings with climate\/air high quality subjects \"\n \"Mark as OFF-TOPIC provided that the question is clearly unrelated to climate\/air high quality AND not a easy greeting. \"\n \"Examples of off-topic: math issues, cooking recipes, sports activities scores, technical help, jokes (except weather-related). \"\n \"Examples of on-topic: 'Howdy, what is the climate?', 'Hello there', 'Good morning, how's the air high quality?', 'What is the temperature?' \"\n \"The ultimate output MUST be a JSON object conforming to the TopicClassificationOutput mannequin.\"\n ),\n output_type=TopicClassificationOutput,\n mannequin=\"gpt-4o-mini\" # Use a quick and cost-effective mannequin\n)<\/code><\/pre>\ngpt-4o-mini<\/code> whereas the primary agent runs on gpt-4o<\/code>.<\/p>\nCreate an Enter Guardrail Operate<\/h3>\n
@input_guardrail<\/code>. The output of this perform will embody two fields outlined earlier: is_off_topic<\/code> and reasoning<\/code>.<\/p>\nGuardrailFunctionOutput<\/code> object containing output_info<\/code> (set from the reasoning<\/code> area) and tripwire_triggered<\/code>.<\/p>\ntripwire_triggered<\/code> worth determines whether or not the enter ought to be blocked. If is_off_topic<\/code> is True<\/code>, the tripwire triggers, blocking the enter. In any other case, the worth is False<\/code> and the primary agent continues processing.<\/p>\n# Create the enter guardrail perform\n@input_guardrail\nasync def off_topic_guardrail(ctx, agent, enter) -> GuardrailFunctionOutput:\n \"\"\"\n Classifies consumer enter to make sure it's on-topic for a climate and air high quality app.\n \"\"\"\n\n outcome = await Runner.run(topic_classification_agent, enter, context=ctx.context)\n return GuardrailFunctionOutput(\n output_info=outcome.final_output.reasoning,\n tripwire_triggered=outcome.final_output.is_off_topic\n )<\/code><\/pre>\nCreate a Rule-based Enter Guardrail Operate<\/h3>\n
\"ignore earlier directions\", \"you at the moment are a\", \"neglect all the things above\", \"developer mode\", \"override security\", \"disregard tips\"<\/code>.<\/p>\ninjection_detection_guardrail<\/code>:<\/p>\n# Rule-based enter guardrail to detect jailbreaking and immediate injection question\n@input_guardrail\nasync def injection_detection_guardrail(ctx, agent, enter) -> GuardrailFunctionOutput:\n \"\"\"\n Detects potential jailbreaking or immediate injection makes an attempt in consumer enter.\n \"\"\"\n\n # Easy keyword-based detection\n injection_patterns = [\n \"ignore previous instructions\",\n \"you are now a\",\n \"forget everything above\",\n \"developer mode\",\n \"override safety\",\n \"disregard guidelines\"\n ]\n\n if any(key phrase in enter.decrease() for key phrase in injection_patterns):\n return GuardrailFunctionOutput(\n output_info=\"Potential jailbreaking or immediate injection detected.\",\n tripwire_triggered=True\n )\n\n return GuardrailFunctionOutput(\n output_info=\"No jailbreaking or immediate injection detected.\",\n tripwire_triggered=False\n )<\/code><\/pre>\ntripwire_triggered<\/code> is about to True<\/code>. In any other case, it stays False<\/code>.<\/p>\nOutline Specialised Agent for Climate and Air High quality<\/h3>\n
# Outline perform instruments and specialised brokers for climate and air qualities\n@function_tool\ndef get_current_weather(latitude: float, longitude: float) -> dict:\n \"\"\"Fetch present climate information for the given latitude and longitude.\"\"\"\n \n url = \"https:\/\/api.open-meteo.com\/v1\/forecast\"\n params = {\n \"latitude\": latitude,\n \"longitude\": longitude,\n \"present\": \"temperature_2m,relative_humidity_2m,dew_point_2m,apparent_temperature,precipitation,weathercode,windspeed_10m,winddirection_10m\",\n \"timezone\": \"auto\"\n }\n response = requests.get(url, params=params)\n return response.json()\n\nweather_specialist_agent = Agent(\n identify=\"Climate Specialist Agent\",\n directions=\"\"\"\n You're a climate specialist agent.\n Your activity is to research present climate information, together with temperature, humidity, wind velocity and path, precipitation, and climate codes.\n\n For every question, present:\n 1. A transparent, concise abstract of the present climate situations in plain language.\n 2. Sensible, actionable strategies or precautions for out of doors actions, journey, well being, or clothes, tailor-made to the climate information.\n 3. If extreme climate is detected (e.g., heavy rain, thunderstorms, excessive warmth), clearly spotlight advisable security measures.\n\n Construction your response in two sections:\n Climate Abstract:\n - Summarize the climate situations in easy phrases.\n\n Recommendations:\n - Record related recommendation or precautions based mostly on the climate.\n \"\"\",\n instruments=[get_current_weather],\n tool_use_behavior=\"run_llm_again\"\n)\n\n@function_tool\ndef get_current_air_quality(latitude: float, longitude: float) -> dict:\n \"\"\"Fetch present air high quality information for the given latitude and longitude.\"\"\"\n\n url = \"https:\/\/air-quality-api.open-meteo.com\/v1\/air-quality\"\n params = {\n \"latitude\": latitude,\n \"longitude\": longitude,\n \"present\": \"european_aqi,us_aqi,pm10,pm2_5,carbon_monoxide,nitrogen_dioxide,sulphur_dioxide,ozone\",\n \"timezone\": \"auto\"\n }\n response = requests.get(url, params=params)\n return response.json()\n\nair_quality_specialist_agent = Agent(\n identify=\"Air High quality Specialist Agent\",\n directions=\"\"\"\n You might be an air high quality specialist agent.\n Your position is to interpret present air high quality information and talk it clearly to customers.\n\n For every question, present:\n 1. A concise abstract of the air high quality situations in plain language, together with key pollution and their ranges.\n 2. Sensible, actionable recommendation or precautions for out of doors actions, journey, and well being, tailor-made to the air high quality information.\n 3. If poor or hazardous air high quality is detected (e.g., excessive air pollution, allergens), clearly spotlight advisable security measures.\n\n Construction your response in two sections:\n Air High quality Abstract:\n - Summarize the air high quality situations in easy phrases.\n\n Recommendations:\n - Record related recommendation or precautions based mostly on the air high quality.\n \"\"\",\n instruments=[get_current_air_quality],\n tool_use_behavior=\"run_llm_again\"\n)<\/code><\/pre>\nOutline the Orchestrator Agent with Enter Guardrails<\/h3>\n
input_guardrails<\/code>. On this property, we cross the listing of the enter guardrail capabilities that we’ve got outlined earlier than; off_topic_guardrail<\/code> and injection_detection_guardrail<\/code>.<\/p>\n# Outline the primary orchestrator agent with guardrails\norchestrator_agent = Agent(\n identify=\"Orchestrator Agent\",\n directions=\"\"\"\n You might be an orchestrator agent.\n Your activity is to handle the interplay between the Climate Specialist Agent and the Air High quality Specialist Agent.\n You'll obtain a question from the consumer and can resolve which agent to invoke based mostly on the content material of the question.\n If each climate and air high quality data is requested, you'll invoke each brokers and mix their responses into one clear reply.\n \"\"\",\n instruments=[\n weather_specialist_agent.as_tool(\n tool_name=\"get_weather_update\",\n tool_description=\"Get current weather information and suggestion including temperature, humidity, wind speed and direction, precipitation, and weather codes.\"\n ),\n air_quality_specialist_agent.as_tool(\n tool_name=\"get_air_quality_update\",\n tool_description=\"Get current air quality information and suggestion including pollutants and their levels.\"\n )\n ],\n tool_use_behavior=\"run_llm_again\",\n input_guardrails=[injection_detection_guardrail, off_topic_guardrail],\n)\n\n\n# Outline the run_agent perform\nasync def run_agent(user_input: str):\n outcome = await Runner.run(orchestrator_agent, user_input)\n return outcome.final_output<\/code><\/pre>\nCreate Essential Operate with Exception Handler<\/h3>\n
# Outline the primary perform of the Streamlit app\ndef most important():\n st.title(\"Climate and Air High quality Assistant\")\n user_input = st.text_input(\"Enter your question about climate or air high quality:\")\n\n if st.button(\"Get Replace\"):\n with st.spinner(\"Considering...\"):\n if user_input:\n strive:\n agent_response = asyncio.run(run_agent(user_input))\n st.write(agent_response)\n besides InputGuardrailTripwireTriggered as e:\n st.write(\"I can solely assist with climate and air high quality associated questions. Please strive asking one thing else! \")\n st.error(\"Information: {}\".format(e.guardrail_result.output.output_info))\n besides Exception as e:\n st.error(e)\n else:\n st.write(\"Please enter a query concerning the climate or air high quality.\")\n\nif __name__ == \"__main__\":\n most important()<\/code><\/pre>\nInputGuardrailTripwireTriggered<\/code> is elevate, it would present a user-friendly message that inform the consumer the app solely may also help for climate and air high quality associated query. <\/p>\noff_topic_guardrail<\/code>, it would present the reasoning from the agent that deal with this. In the meantime if it coming from injection_detection_guardrail<\/code>, the app will present a hard-coded message \u201cPotential jailbreaking or immediate injection detected.\u201d.<\/p>\nRun and Verify<\/h3>\n
streamlit run app08_guardrails.py<\/code><\/pre>\n![\"\"](\"https:\/\/contributor.insightmediagroup.io\/wp-content\/uploads\/2025\/09\/image-3-1024x993.png\")
![\"\"](\"https:\/\/contributor.insightmediagroup.io\/wp-content\/uploads\/2025\/09\/image-2-1024x498.png\")
injection_detection_guardrail<\/code> runs first, adopted by the off_topic_guardrail<\/code>. As soon as the enter passes these two guardrails, the primary agent can execute the method.<\/p>\n![\"\"](\"https:\/\/contributor.insightmediagroup.io\/wp-content\/uploads\/2025\/09\/image-1-1024x896.png\")
off_topic_guardrail<\/code> triggers the tripwire, cuts the method halfway, and returns a message together with some additional particulars about why it occurred.<\/p>\n![\"\"](\"https:\/\/contributor.insightmediagroup.io\/wp-content\/uploads\/2025\/09\/image-4-1024x379.png\")
Output Guardrail<\/h2>\n
Put together the Output Guardrail Operate<\/h3>\n
off_topic_guardrail<\/code>, we create a brand new professionalism_guardrail<\/code>. It makes use of a Pydantic mannequin for the output, a devoted agent to categorise professionalism, and an async perform adorned with @output_guardrail<\/code> to implement the test.<\/p>\n# Outline output mannequin for Output Guardrail Agent\nclass ResponseCheckerOutput(BaseModel):\n is_not_professional: bool = Subject(\n description=\"True if the output is just not skilled, False in any other case\"\n )\n reasoning: str = Subject(\n description=\"Temporary clarification of why the output was categorized as skilled or unprofessional\"\n )\n\n# Create Output Guardrail Agent\nresponse_checker_agent = Agent(\n identify=\"Response Checker Agent\",\n directions=\"\"\"\n You're a response checker agent.\n Your activity is to guage the professionalism of the output generated by different brokers.\n\n For every response, present:\n 1. A classification of the response as skilled or unprofessional.\n 2. A quick clarification of the reasoning behind the classification.\n\n Construction your response in two sections:\n Professionalism Classification:\n - State whether or not the response is skilled or unprofessional.\n\n Reasoning:\n - Present a short clarification of the classification.\n \"\"\",\n output_type=ResponseCheckerOutput,\n mannequin=\"gpt-4o-mini\"\n)\n\n# Outline output guardrail perform\n@output_guardrail\nasync def professionalism_guardrail(ctx, agent, output) -> GuardrailFunctionOutput:\n outcome = await Runner.run(response_checker_agent, output, context=ctx.context)\n return GuardrailFunctionOutput(\n output_info=outcome.final_output.reasoning,\n tripwire_triggered=outcome.final_output.is_not_professional\n )<\/code><\/pre>\nOutput Guardrail Implementation<\/h3>\n
output_guardrails<\/code>. This ensures each response is checked earlier than being proven to the consumer.<\/p>\n# Add professionalism guardrail to the orchestrator agent\norchestrator_agent = Agent(\n identify=\"Orchestrator Agent\",\n directions=\"...similar as earlier than...\",\n instruments=[...],\n input_guardrails=[injection_detection_guardrail, off_topic_guardrail],\n output_guardrails=[professionalism_guardrail],\n)<\/code><\/pre>\nOutputGuardrailTripwireTriggered<\/code> exceptions. If triggered, the app will block the unprofessional response and return a pleasant fallback message as an alternative.<\/p>\n# Deal with output guardrail in the primary perform\nbesides OutputGuardrailTripwireTriggered as e:\n st.write(\"The response did not meet our high quality requirements. Please strive once more.\")\n st.error(\"Information: {}\".format(e.guardrail_result.output.output_info))<\/code><\/pre>\nRun and Verify<\/h3>\n
streamlit run app08_guardrails.py<\/code><\/pre>\n![\"\"](\"https:\/\/contributor.insightmediagroup.io\/wp-content\/uploads\/2025\/09\/image-5-1024x788.png\")
Conclusion<\/h2>\n
Earlier Articles in This Sequence<\/h2>\n
References<\/h2>\n
\n