@iris_meredith@mastodon.social Good piece. You include input risk with a prompt, yet leave out output risk. A model that can only say things is unconstrained, yes. A model whose outputs are parsed into typed actions and checked deterministically before anything runs is constrained. Coding harnesses do this with unit tests, but we can do much better. Behavior-based control doesn't care about inputs or intentions. I give away an open source harness as proof, and just demoed it live today at OWASP: https://wirken.ai