A regulated multi-agent assistant can read user input, call internal tools, receive tool responses, and produce user-facing answers. Security review found filtering only on the final answer, allowing jailbreak text in inputs and sensitive data in tool responses to influence intermediate reasoning and tool selection. Which guardrail strategy best addresses the gap?
Select an answer to reveal the explanation.
Short Explanation
Guardrails that only polish the final sentence miss the dangerous middle: poisoned inputs, bad tool calls, and sensitive tool responses feeding the next thought. Multi-intervention guardrails cover input, tool call, tool response, and output stages. Output-only filters, no guardrails, and user self-reporting fail regulated multi-agent security. B is the correct strategy.
Full Explanation
Correct answer: B. Secure multi-agent solutions require a multi-intervention guardrail strategy covering user inputs, tool calls, tool responses, and outputs. Intermediate stages can leak data or steer tools even when the final answer is filtered.
A is incorrect because output-only filtering leaves input injection and tool-path abuse unmitigated.
C is incorrect because disabling guardrails increases policy and safety risk in regulated settings.
D is incorrect because user self-reporting is neither preventive nor reliable control.
Exam focus: guardrails are multi-stage for agentic systems, not a single exit filter.