{"jtbd":{"id":"llm-input-guardrails","slug":"llm-input-guardrails","name":"Programmable LLM input/output guardrails","shortName":"Programmable LLM input/output guardrails","problemStatement":"Enforce custom safety, topical, and tool-use policies around agent LLM calls — not just a fixed taxonomy."},"pick":{"id":"nvidia-nemo-guardrails","slug":"nvidia-nemo-guardrails","name":"NVIDIA NeMo Guardrails","tagline":"When OpenAI Moderation taxonomy is not enough and you need programmable rails. Host Llama Guard on Groq for…","website":"https://docs.nvidia.com/nemo/guardrails/","overall":7.87,"scoreBand":{"low":7.3,"mid":7.9,"high":8.5,"halfWidth":0.6,"basis":"editorial_prior","display":"7.3–8.5 (editorial prior)"},"scoreLayers":{"editorialPrior":7.87,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Open-source NeMo Guardrails library (self-host) + NeMo microservices / NIM integration paths. Cost = your GPUs or NVIDIA API Catalog / NIM inference rates when routing guard models. Supports Llama Guard and other engines via OpenAI-compatible base_url.","scores":{"capabilityFit":8.8,"pricePerformance":7.5,"latencyReliability":8,"developerDx":7,"privacyPosture":8.8,"lockInRisk":4.5,"maturity":8,"overall":7.87,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},"runnersUp":[{"id":"lakera","slug":"lakera","name":"Lakera Guard","tagline":"Depot pick for a dedicated prompt-injection firewall in front of any LLM. NeMo when you need programmable…","website":"https://www.lakera.ai","overall":8.21,"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.21,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14 (platform.lakera.ai/pricing): Community $0 — 10k requests/mo, 8k-token prompt cap, SaaS EU residency, SOC2/GDPR. Enterprise sales-gated — flexible volume, configurable prompt size, SaaS or self-host, SSO/RBAC/SIEM, EU/US residency. No public per-call overage. Acquired by Check Point (Sep 2025); enterprise quotes may route through Check Point. API: POST https://api.lakera.ai/v2/guard (OpenAI-style messages → flagged).","scores":{"capabilityFit":8.8,"pricePerformance":7.8,"latencyReliability":8.4,"developerDx":9,"privacyPosture":8.8,"lockInRisk":5.5,"maturity":8,"overall":8.21,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"galileo","slug":"galileo","name":"Galileo","tagline":"Pick for production hallucination measurement + guardrails. Braintrust/Promptfoo for lighter eval loops.","website":"https://www.galileo.ai","overall":7.45,"scoreBand":{"low":6.9,"mid":7.5,"high":8.1,"halfWidth":0.6,"basis":"editorial_prior","display":"6.9–8.1 (editorial prior)"},"scoreLayers":{"editorialPrior":7.45,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14 (galileo.ai/pricing live): Free **$0/mo** — 5,000 traces/mo, unlimited users/custom evals. Pro **$100/mo** (annual; scales with traces) — 50,000 traces/mo, standard RBAC, advanced analytics, Slack support. Enterprise contact — unlimited traces, VPC/on-prem, SSO, real-time guardrails, 24/7.","scores":{"capabilityFit":8.4,"pricePerformance":6.2,"latencyReliability":8,"developerDx":7.8,"privacyPosture":8,"lockInRisk":6,"maturity":7.8,"overall":7.45,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"openai-moderation","slug":"openai-moderation","name":"OpenAI Moderation","tagline":"Default first-pass content filter for agent I/O. Pair with Llama Guard (Groq) or NeMo Guardrails when you…","website":"https://platform.openai.com/docs/guides/moderation","overall":8.62,"scoreBand":{"low":8,"mid":8.6,"high":9.2,"halfWidth":0.6,"basis":"editorial_prior","display":"8.0–9.2 (editorial prior)"},"scoreLayers":{"editorialPrior":8.62,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-21","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Free moderation endpoint — omni-moderation-latest for text+images (images ≤20 MB). Also inline moderation on Responses/Chat Completions via moderation.model. Categories include hate, harassment, self-harm, sexual, violence, illicit, etc. Not customizable / not self-hostable.","scores":{"capabilityFit":8.2,"pricePerformance":9.8,"latencyReliability":9.2,"developerDx":9.4,"privacyPosture":7.5,"lockInRisk":5.5,"maturity":9.5,"overall":8.62,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"groq","slug":"groq","name":"Groq","tagline":"Use when latency is the product. Do not build your whole company on one Groq model SKU — they rotate.","website":"https://groq.com","overall":7.95,"scoreBand":{"low":7.4,"mid":8,"high":8.6,"halfWidth":0.6,"basis":"editorial_prior","display":"7.4–8.6 (editorial prior)"},"scoreLayers":{"editorialPrior":7.95,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"Per-token with free tier; LPU inference; narrow production model set (Llama/Qwen/GPT-OSS etc.); batch discounts. Llama Guard 4 12B (model id meta-llama/llama-guard-4-12b) is still documented at console.groq.com/docs/model/meta-llama/llama-guard-4-12b as an open safety classifier; its per-token price figure was removed because it couldn't be re-sourced on 2026-10-21 (no price on that page or on console.groq.com/docs/models as of 2026-10-21). See the stored rows for sourced Groq prices, including the Llama Prompt Guard 2 classifiers.","scores":{"capabilityFit":7.8,"pricePerformance":9,"latencyReliability":8.2,"developerDx":8.8,"privacyPosture":7,"lockInRisk":5,"maturity":7.8,"overall":7.95,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"guardrails-ai","slug":"guardrails-ai","name":"Guardrails AI","tagline":"OSS programmable rails peer to NeMo Guardrails. Lakera when you want a hosted injection firewall API…","website":"https://guardrailsai.com","overall":8.2,"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.2,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: OSS Guardrails + Guardrails Hub (70+ validators) free/self-host. Guardrails Pro enterprise managed — usage-based / quote; AWS Marketplace listings historically cite ~$50k annual optional contracts. No public per-call Pro matrix — treat Pro as sales-led.","scores":{"capabilityFit":8.4,"pricePerformance":8.8,"latencyReliability":7.8,"developerDx":8.2,"privacyPosture":8.5,"lockInRisk":3,"maturity":7.8,"overall":8.2,"kind":"curated_estimate","confidence":"medium","asOf":"2026-09-14"}},{"id":"arthur-ai","slug":"arthur-ai","name":"Arthur AI","tagline":"Monitoring/evals peer with a real $60 Premium. Prefer Braintrust/Langfuse for tracing defaults; Arthur when…","website":"https://www.arthur.ai","overall":7.89,"scoreBand":{"low":7.3,"mid":7.9,"high":8.5,"halfWidth":0.6,"basis":"editorial_prior","display":"7.3–8.5 (editorial prior)"},"scoreLayers":{"editorialPrior":7.89,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14 (arthur.ai/pricing): Free $0 — 4 use cases, 5k jobs / 300k spans / 12k inferences / 3k evals, 7-day retention. Premium $60/mo — 100 use cases, 20k jobs / 1.2M spans / 100k inferences / 75k evals, 30-day retention, custom dashboards/alerts. Enterprise custom (VPC, SSO, BAA, SLA). Arthur Shield LLM firewall is separately sales-gated.","scores":{"capabilityFit":8.2,"pricePerformance":8,"latencyReliability":8,"developerDx":8.2,"privacyPosture":7.8,"lockInRisk":4.5,"maturity":8,"overall":7.89,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"hiddenlayer","slug":"hiddenlayer","name":"HiddenLayer","tagline":"Enterprise AI security peer to Prisma AIRS / Cisco AI Defense. Lakera/NeMo/Guardrails for builders…","website":"https://www.hiddenlayer.com","overall":6.88,"scoreBand":{"low":6.3,"mid":6.9,"high":7.5,"halfWidth":0.6,"basis":"editorial_prior","display":"6.3–7.5 (editorial prior)"},"scoreLayers":{"editorialPrior":6.88,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Enterprise AI security platform (model + supply-chain + runtime guardrails). No public list price; secondary estimates ~$30k–$150k/yr. Sales-led only — skip unless security RFP already shortlists them.","scores":{"capabilityFit":8.4,"pricePerformance":4,"latencyReliability":8.2,"developerDx":6,"privacyPosture":8.8,"lockInRisk":6.5,"maturity":8,"overall":6.88,"kind":"curated_estimate","confidence":"medium","asOf":"2026-09-14"}}],"scoreBand":{"low":7.3,"mid":7.9,"high":8.5,"halfWidth":0.6,"basis":"editorial_prior","display":"7.3–8.5 (editorial prior)"},"scoreLayers":{"editorialPrior":7.87,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"whyPickOverHigherScore":{"pickId":"nvidia-nemo-guardrails","pickName":"NVIDIA NeMo Guardrails","pickScore":7.87,"highestScoredCandidateId":"openai-moderation","highestScoredCandidateName":"OpenAI Moderation","highestScore":8.62,"pickHasLowerCompositeScore":true,"delta":-0.75,"pickLeadsOnDimensions":["capabilityFit (8.8 vs 8.2)","privacyPosture (8.8 vs 7.5)","lower lockInRisk (4.5 vs 5.5)"],"explanation":"NVIDIA NeMo Guardrails (7.87) is the editorial pick for Programmable LLM input/output guardrails over higher-composite OpenAI Moderation (8.62) because composite scores are provider-wide priors while NVIDIA NeMo Guardrails wins on capabilityFit (8.8 vs 8.2), privacyPosture (8.8 vs 7.5), lower lockInRisk (4.5 vs 5.5): capability of policy engine + privacy. Distinct from production-guardrail-evals (monitoring) — this is the runtime rails layer."},"cheapest":{"providerId":"openai-moderation","providerName":"OpenAI Moderation","skuId":"openai-moderation-omni-free","item":"omni-moderation-latest (moderation endpoint)","plan":"omni-moderation-latest (moderation endpoint) — Officially free: 'The moderation endpoint is free to use'","unit":"usd_per_1k_requests","amountUsd":0,"isFloorPrice":false,"floorWarning":null,"skuCountInUnit":1,"isDepotPick":false,"sourceUrl":"https://developers.openai.com/api/docs/guides/moderation","asOf":"2026-10-21","verifiedAsOf":"2026-10-21"},"recommendedWorkloadQuote":null,"representativeQuote":null,"estimatedTaskCost":null,"freeAlternatives":[],"referenceDocs":[],"falsification":{"jtbdId":"llm-input-guardrails","jtbdName":"Programmable LLM input/output guardrails","currentPickId":"nvidia-nemo-guardrails","currentPickScore":7.87,"challengerId":"lakera","challengerScore":8.21,"currentScoreGap":0.34,"minVerifiedOutcomes":10,"requiredOutcomeMargin":0.49,"requiredSuccessRateDelta":0.15,"maxPickPriceIncreasePct":25,"whatWouldChangePick":["Lakera Guard (lakera) outperforms NVIDIA NeMo Guardrails (nvidia-nemo-guardrails) by >= 0.49 outcome points (or >= 15% worked-rate delta) across >= 10 Countersign-verified production outcomes.","A verified price increase > 25% on NVIDIA NeMo Guardrails's representative SKU for llm-input-guardrails without a corresponding capability gain.","Live caller rail exhaustion (?exhausted=nvidia-nemo-guardrails) or sustained >= 30% degraded/failed rate in verified production outcomes."],"frozenHoldoutPolicy":{"holdoutSplit":"20% frozen benchmark holdout tasks + 80% live production outcome receipts","requireCountersignReceipt":true,"requiredEvidenceTiers":["outcome_verified","reference_checked"],"minDistinctContributors":2,"antiGamingRule":"Unverified self-reports and seed/editorial rows never mutate picks or scores."},"triggers":[{"kind":"verified_outcomes_outperformance","challengerId":"lakera","minVerifiedOutcomes":10,"requiredOutcomeMargin":0.49,"requiredWorkedRateDelta":0.15},{"kind":"verified_price_increase","providerId":"nvidia-nemo-guardrails","maxPriceIncreasePct":25},{"kind":"live_rail_exhaustion_or_degradation","providerId":"nvidia-nemo-guardrails","immediateOverrideUrl":"/api/decide?jtbd=llm-input-guardrails&exhausted=nvidia-nemo-guardrails"}],"submissionSpec":{"falsifyEndpoint":"/api/falsify?jtbd=llm-input-guardrails","outcomesEndpoint":"POST /api/feedback","correctionsEndpoint":"POST /api/corrections","payloadTemplate":{"agentIdentity":"agent:<your-agent-id>","jtbdId":"llm-input-guardrails","providerId":"lakera","outcome":"worked","detail":"Comparative production evaluation on llm-input-guardrails (n>=10 tasks) with Countersign receipt.","confidence":"high","receipt":{"countersign":{"claim_id":"cs-00000000","status":"verified","evidence_tier":"outcome_verified","counts_as_verified":true}}}}},"whatWouldChangePick":["Lakera Guard (lakera) outperforms NVIDIA NeMo Guardrails (nvidia-nemo-guardrails) by >= 0.49 outcome points (or >= 15% worked-rate delta) across >= 10 Countersign-verified production outcomes.","A verified price increase > 25% on NVIDIA NeMo Guardrails's representative SKU for llm-input-guardrails without a corresponding capability gain.","Live caller rail exhaustion (?exhausted=nvidia-nemo-guardrails) or sustained >= 30% degraded/failed rate in verified production outcomes."],"routePlan":{"jtbdId":"llm-input-guardrails","primary":{"providerId":"nvidia-nemo-guardrails","name":"NVIDIA NeMo Guardrails","overall":7.87,"scoreBand":{"low":7.3,"mid":7.9,"high":8.5,"halfWidth":0.6,"basis":"editorial_prior","display":"7.3–8.5 (editorial prior)"},"scoreLayers":{"editorialPrior":7.87,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"primary","reason":"Editorial Depot Pick for Programmable LLM input/output guardrails; healthy/eligible under caller constraints."},"fallback":[{"providerId":"lakera","name":"Lakera Guard","overall":8.21,"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.21,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Programmable LLM input/output guardrails."},{"providerId":"galileo","name":"Galileo","overall":7.45,"scoreBand":{"low":6.9,"mid":7.5,"high":8.1,"halfWidth":0.6,"basis":"editorial_prior","display":"6.9–8.1 (editorial prior)"},"scoreLayers":{"editorialPrior":7.45,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Programmable LLM input/output guardrails."},{"providerId":"openai-moderation","name":"OpenAI Moderation","overall":8.62,"scoreBand":{"low":8,"mid":8.6,"high":9.2,"halfWidth":0.6,"basis":"editorial_prior","display":"8.0–9.2 (editorial prior)"},"scoreLayers":{"editorialPrior":8.62,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-21","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Programmable LLM input/output guardrails."},{"providerId":"groq","name":"Groq","overall":7.95,"scoreBand":{"low":7.4,"mid":8,"high":8.6,"halfWidth":0.6,"basis":"editorial_prior","display":"7.4–8.6 (editorial prior)"},"scoreLayers":{"editorialPrior":7.95,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Programmable LLM input/output guardrails."},{"providerId":"guardrails-ai","name":"Guardrails AI","overall":8.2,"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.2,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Programmable LLM input/output guardrails."},{"providerId":"arthur-ai","name":"Arthur AI","overall":7.89,"scoreBand":{"low":7.3,"mid":7.9,"high":8.5,"halfWidth":0.6,"basis":"editorial_prior","display":"7.3–8.5 (editorial prior)"},"scoreLayers":{"editorialPrior":7.89,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Programmable LLM input/output guardrails."},{"providerId":"hiddenlayer","name":"HiddenLayer","overall":6.88,"scoreBand":{"low":6.3,"mid":6.9,"high":7.5,"halfWidth":0.6,"basis":"editorial_prior","display":"6.3–7.5 (editorial prior)"},"scoreLayers":{"editorialPrior":6.88,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Programmable LLM input/output guardrails."}],"disqualified":[],"expectedRegret":{"scoreDeltaVsUnconstrainedPick":0,"unconstrainedPickId":"nvidia-nemo-guardrails","activePrimaryId":"nvidia-nemo-guardrails","summary":"0.00 score regret: unconstrained editorial pick satisfies all caller constraints."},"evidenceAgeDays":{"editorialScoreAgeDays":43,"pricingVerifiedAgeDays":0,"editorialPriorAsOf":"2026-09-14","pricingLastVerifiedAt":"2026-10-27"},"confidenceBand":{"low":7.3,"mid":7.9,"high":8.5,"halfWidth":0.6,"basis":"editorial_prior","display":"7.3–8.5 (editorial prior)"},"constraintsApplied":false,"constraintBundle":{"task":null,"jtbd":"llm-input-guardrails","quotaExhausted":[],"degraded":[],"healthy":[],"budgetUsd":null,"maxLatencyMs":null,"region":null,"privacy":null,"exit":[],"existing":[]}},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","tie":false,"scoreGap":-0.34,"decidingFactor":null,"tieNote":null,"rationale":"capability of policy engine + privacy. Distinct from production-guardrail-evals (monitoring) — this is the runtime rails layer.","whenNotTopPick":"Need a dedicated prompt-injection API — lakera; only need free category flags — openai-moderation; production hallucination monitoring SaaS — galileo; cheap Llama Guard leaf — groq.","skipTopPick":false,"skipReason":null,"matchedConstraints":[],"pricingSummary":"As of 2026-09-14: Open-source NeMo Guardrails library (self-host) + NeMo microservices / NIM integration paths. Cost = your GPUs or NVIDIA API Catalog / NIM inference rates when routing guard models. Supports Llama Guard and other engines via OpenAI-compatible base_url.","cite":"Depot Pick for llm-input-guardrails: nvidia-nemo-guardrails (asOf 2026-09-14). See GET /api/jtbds/llm-input-guardrails + GET /api/methodology.","nextActions":[{"step":1,"title":"Inspect full JTBD + embeds","href":"/api/jtbds/llm-input-guardrails?embed=providers","why":"Confirm pick, runners-up, and methodology notes."},{"step":2,"title":"Quote sourced SKUs","href":"/api/quote?jtbd=llm-input-guardrails","why":"Depot Pick SKUs plus the cheapest sourced SKU whose unit matches this job. Does not change the pick. Does not blend input and output or borrow a chat rate for a non-chat job."},{"step":3,"title":"Open provider detail","href":"/api/providers/nvidia-nemo-guardrails","why":"Scores, pricingNotes, strengths/weaknesses, communitySignals (claims only)."},{"step":4,"title":"Cite methodology","href":"/api/methodology","why":"Required when publishing a Depot Pick citation."},{"step":5,"title":"Grab badge SVG","href":"/api/badge?type=depot-pick&jtbd=llm-input-guardrails","why":"Embed in README / agent passport."},{"step":6,"title":"Post production insight","method":"POST","href":"/api/insights","why":"Unverified until curated; never auto-mutates official scores."}],"honesty":["Do not invent scores or benches.","Insights are claims until curated/reviewed; they never silently mutate official scores.","lockInRisk higher = more lock-in (worse).","normalizedUsdPerMillionTokens is set only for a single sourced token row. Otherwise null, with a machine-readable reason. Do not coerce GPU, minute, or per-1k search units.","Runners-up are not Depot Picks.","Depot overall is editorial_weighted, not Arena Elo and not an Artificial Analysis index."],"asOf":"2026-09-14","depth":{"whenNotToUse":{"text":"Need a dedicated prompt-injection API — lakera; only need free category flags — openai-moderation; production hallucination monitoring SaaS — galileo; cheap Llama Guard leaf — groq.","source":"editorial `whenNotTopPick` (data/jtbds.json)"},"whenNotToUseReason":null,"runnerUp":{"providerId":"lakera","name":"Lakera Guard","overallForJob":8.21,"pickOverallForJob":7.87,"beatsPickOn":["pricePerformance","latencyReliability","developerDx"],"source":"first resolvable entry of the job's editorially ranked `runnersUpIds`; scores are stored job-weighted scores"},"runnerUpReason":null,"lockIn":{"pickLockInRisk":4.5,"runnerUpLockInRisk":5.5,"scale":"0–10 stored curated estimate; higher = more lock-in (worse)","pickExitSignals":["open source (provider tag `oss`)"],"runnerUpExitSignals":[],"pickNotes":[],"selfHostFallback":[],"migration":"The pick has lower stored lock-in risk than runner-up Lakera Guard (4.5 vs 5.5). Pick exit signals: open source (provider tag `oss`).","migrationReason":null,"derivedFrom":"stored lockInRisk scores, provider tags (oss, self-host, openai-compat, open-models), free rows that list this job, and verbatim provider notes. No migration guide was invented."}},"citation":{"text":"Agent Provider Depot (v0.12.151), Depot Pick for llm-input-guardrails: nvidia-nemo-guardrails, scores as of 2026-09-14, retrieved 2026-10-27. https://getagentdepot.com/jtbds/llm-input-guardrails","markdown":"[Agent Provider Depot](https://getagentdepot.com/jtbds/llm-input-guardrails) (v0.12.151) — Depot Pick for `llm-input-guardrails`: **nvidia-nemo-guardrails** (scores as of 2026-09-14, retrieved 2026-10-27)","fields":{"publisher":"Agent Provider Depot","version":"0.12.151","role":"depot_pick","jtbdId":"llm-input-guardrails","providerId":"nvidia-nemo-guardrails","scoreAsOf":"2026-09-14","retrievedOn":"2026-10-27","page":"https://getagentdepot.com/jtbds/llm-input-guardrails","api":"https://getagentdepot.com/api/decide?jtbd=llm-input-guardrails"},"howToCite":"Cite Depot as an editorial, dated recommendation, not a benchmark: name the job, the Depot Pick (or runner-up), the score asOf date and the day you retrieved it, and link the job page. Format: “Agent Provider Depot (v{version}), Depot Pick for {jobId}: {providerId}, scores as of {scoreAsOf}, retrieved {retrievedOn}. {baseUrl}/jtbds/{jobId}”. Quote prices only with their own sourceUrl and asOf. If the pick's score is stale (freshness.pick.score.stale), say so."},"freshness":{"pick":{"score":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"lastReviewed":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"sourceCheck":{"checkedAt":"2026-10-27","sourceUrls":3,"sourcesReachable":3,"pricingRows":0,"pricingRowsReconfirmed":0,"note":"A source re-check confirms the page is reachable and, for pricing rows, that the stored amount and SKU name appear on it. It does not re-derive or change the score.","reason":null}},"scoreAsOf":"2026-09-14","editorialPriorAsOf":"2026-09-14","pricingLastVerifiedAt":"2026-10-27","pickLastReviewed":"2026-09-14","runnersUpScoreAsOf":["2026-09-14","2026-09-14","2026-09-14","2026-09-14","2026-09-14","2026-09-14","2026-09-14"],"contractAsOf":"2026-10-03","pricingShape":"prose_notes_only","normalizedUsdPerMillionTokens":null,"normalizationStatus":"unavailable","normalizationReason":"no_sourced_price"},"pricingContract":{"normalizedUsdPerMillionTokens":null,"normalizationStatus":"unavailable","normalizationReason":"no_sourced_price","shape":"prose_notes_only","filterable":false,"priceSortEligible":false,"priceSortKeyUsdPerMillionInputTokens":null,"rows":[],"notesExcerpt":"As of 2026-09-14: Open-source NeMo Guardrails library (self-host) + NeMo microservices / NIM integration paths. Cost = your GPUs or NVIDIA API Catalog / NIM inference rates when routing guard models. Supports Llama Guard and other engines via OpenAI-compatible base_url.","notesCheck":{"status":"no_known_contradiction","pairs":[],"review":null,"note":null},"lastReviewed":"2026-09-14","scoreAsOf":"2026-09-14","website":"https://docs.nvidia.com/nemo/guardrails/","doNotParse":"Do not parse pricingNotes. Use rows only. normalizedUsdPerMillionTokens is a single number only when this provider has exactly one sourced token row. Input/output, context tiers, and non-token units stay null at this level.","gap":"No sourced price row for this provider. pricingNotes stay prose. See research/gaps.md."},"links":{"jtbd":"/jtbds/llm-input-guardrails","jtbdApi":"/api/jtbds/llm-input-guardrails","leaderboard":"/api/leaderboards?jtbd=llm-input-guardrails","methodology":"/api/methodology","badge":"/api/badge?type=depot-pick&jtbd=llm-input-guardrails","decide":"/api/decide?jtbd=llm-input-guardrails","humanPage":"/jtbds/llm-input-guardrails","alternatives":"/api/alternatives?provider=nvidia-nemo-guardrails","canonical":"/api/canonical","quote":"/api/quote?jtbd=llm-input-guardrails","falsify":"/api/falsify?jtbd=llm-input-guardrails"},"constraintBundle":{"task":null,"jtbd":"llm-input-guardrails","quotaExhausted":[],"degraded":[],"healthy":[],"budgetUsd":null,"maxLatencyMs":null,"region":null,"privacy":null,"exit":[],"existing":[]},"stackContext":{"host":null,"framework":null,"repo":null,"lang":null,"existing":[],"volume":null,"sender":null,"detectedFromTask":[]},"keep":null,"contextAdvice":null,"communityFeedback":{"pickOnThisJob":{"failed":0,"degraded":0,"worked":0,"insights":0,"withVerifiedReceipt":0,"failureModes":{},"latestAt":null,"note":"Agent-reported claims (unverified unless a receipt is verified by Depot's re-check). They never change scores or picks."},"outcomes":{"job":{"n":0,"worked":0,"degraded":0,"failed":0,"failureModes":{},"verifiedReports":0,"contributors":0,"excluded":{"seed_editorial":0,"test":0,"notFeedback":0},"reason":"no_submitted_outcome_reports_yet"},"pick":{"providerId":"nvidia-nemo-guardrails","n":0,"worked":0,"degraded":0,"failed":0,"failureModes":{},"evidenceTiers":{"agent_claim":0,"self_declared":0,"reference_checked":0,"outcome_verified":0},"reason":"no_submitted_outcome_reports_yet"},"scoresMutated":false,"more":"/api/outcomes?jtbd=llm-input-guardrails"},"report":"POST /api/feedback {agentIdentity, outcome: failed|degraded|worked, detail, providerId, jtbdId, failureModeId?, receipt?}"}}