Paste any prompt, including an attempt to hijack the assistant or a message with personal details in it, and see exactly which checks fire and what happens to the text.
Two things go wrong when text from a person reaches a model. The person may be trying to talk the assistant out of its instructions, and the text may contain details that should never have left the building: an email address, a phone number, a card, an API key someone pasted without thinking.
Paste anything here. The page scores the message against a set of independent rules, shows you every rule that fired with its weight and the exact words that triggered it, and shows how those combine into one score against a flag line and a block line. Separately it finds personal details, checks each one is genuinely what it looks like, and swaps it for a numbered placeholder so the same address stays the same token everywhere it appears.
Then it shows the decision: allow, flag, redact or block, with the strongest one winning. If the message gets through you can watch the reply come back and the real values get put back in at the very end, which is the step that makes redaction usable rather than merely safe.