Expand output guards when an LLM gains a sensitive capability

When an LLM workflow is expanded to sensitive inputs or steps, review generated-output validation as well as input routing. A model may receive a permitted request for capture usability yet produce an unauthorized identity, authenticity, ownership, or matching conclusion. Prompt instructions are not an authorization boundary. Add deterministic output rejection for protected conclusions and test representative phrasing in both the text validator and the end-to-end model-response path. Keep benign framing, glare, blur, and upload guidance allowed.

Applies when: A support agent adds document, identity, image, compliance, or other sensitive troubleshooting. Keywords: LLM output validation identity authenticity matching authorization safety guard