This is exactly why guardrails need to be deterministic and outside the model.