Skip to main content
Dome provides runtime protection for your AI agents by filtering requests and responses through configurable Guardrails. While Diamond evaluates agent behavior before deployment, Dome defends agents in production.

​
How Dome Works

Dome interposes between users and your agent, inspecting traffic in both directions:
Input Guards filter incoming requests before they reach your agent, blocking prompt injection attempts, detecting malicious content, and enforcing content policies. Output Guards filter outgoing responses before they reach users, preventing data leakage, redacting sensitive information, and ensuring compliance with content guidelines.

​
Accessing Guardrails

Navigate to Guardrails in the sidebar to view all registered agents and their protection status. Click the Configure icon (gear) to open the Dome Configuration page.

​
Adding Guards

Click the + button in either the Input Guards or Output Guards section to add a new Guard. Select a Guard type from the dropdown:
  • Security: Detect adversarial inputs
  • Moderation: Filter harmful content
  • Privacy: Protect sensitive data
Review Red Team findings before choosing Guards. Successful jailbreak, prompt injection, or tool-misuse strategies point to Security input Guards. Leaked personal or internal data points to Privacy output Guards. Harmful-content delivery points to Moderation Guards on inputs, outputs, or both.

​
Security Guards

Security Guards protect against adversarial inputs designed to manipulate your agent. Underlying Detectors:
  • encoding-heuristics: Detects encoded content that may hide malicious payloads
  • prompt-injection-mbert: ML model trained to identify injection attempts
Enable security Guards on inputs for customer-facing agents, agents with access to sensitive data or tools, and any agent exposed to untrusted users.

​
Moderation Guards

Moderation Guards filter content that violates usage policies or community standards. Underlying Detectors:
  • moderation-flashtext: Fast keyword-based detection
  • moderation-deberta: ML model for nuanced content classification
Enable moderation Guards on inputs to block requests for harmful content, and on outputs to prevent inappropriate responses.

​
Privacy Guards

Privacy Guards detect and protect personally identifiable information (PII). Underlying Detector:
  • privacy-presidio: Microsoft Presidio-based entity recognition
Enable privacy Guards on inputs to detect when users share sensitive information, and on outputs to prevent PII leakage.

​
Execution Settings

Each Guard has configurable execution settings.

​
Early Exit

When enabled, processing stops if this Guard flags the input. The request is blocked without executing subsequent Guards.
  • Enable when a detection should definitively block the request
  • Disable when you need comprehensive logging of all detections

​
Execution Mode

Serial: Guards execute in sequence. Use when Guard order matters or later Guards depend on earlier transformations. Parallel: Guards execute simultaneously. Use when Guards are independent and you want lower latency.

​
Guard Pipeline

The order of Guards determines the execution pipeline. Use the Execution Flow panel to visualize how requests flow through your Guards.

​
Testing Configuration

Use the Execution Flow panel to test your Guardrail pipeline before deploying.
  1. Select Input Flow or Output Flow from the dropdown
  2. Enter test content in the text area
  3. Click Send to execute the pipeline
  4. Review which Guards triggered and what actions were taken
Test cases to try:

​
Saving and Exporting

After configuring Guards, click Save Configuration. The agent’s status changes from Unprotected to Domed once Guardrails are active. Use the toolbar to:
  • View Code: See configuration as code for developers
  • Export: Save configuration to version control or share between environments
  • Import: Load a previously exported configuration

​
Best Practices

  • Start with security: Enable security Guards on inputs for any externally-accessible agent
  • Layer defenses: Use multiple Guard types; an attacker who bypasses one may be caught by another
  • Test before deploying: Verify Guards behave as expected using the Execution Flow panel
  • Monitor after deployment: Review metrics to identify false positives and missed detections

​
Next Steps

Deploy Dome

Integrate Dome into your agent code

Observe Traces

Monitor Guardrail performance

Protection Overview

Complete SDK reference for developers

Custom Detectors

Build custom detection methods
Last modified on June 13, 2026