Guardrailing is usually done with a smaller model (< 1b) to filter out simple "not aligned prompt" and not waste compute.