Guardrails and Authorization

A robust architecture uses multiple layers of protection:

1. Input and extraction validation: Ensure extracted fields have valid types, formats, and allowed values.
2. Intent scope checks: Reject or redirect unsupported requests.
3. Authentication and authorization: Verify identity and permission to access a record or perform an action.
4. Deterministic business rules: Enforce mandatory checks and valid transitions.
5. Confirmation gates: Require explicit user approval for sensitive actions.
6. Idempotency and duplicate protection: Prevent accidental repeated actions.
7. Audit logging: Preserve evidence of what happened and why.

These controls should be enforced in application code and trusted services, not merely requested in an LLM prompt.