問題文
A regulated deployment must block requests that ask the agent to reveal another customer's data, and must also stop the agent's own replies from containing personal identifiers. At which stages do these two controls operate?
選択肢
- The first operates on the incoming request before the model is called, and the second operates on the produced reply before it reaches the user.
- Both operate on the incoming request, since a request that is allowed through the input filter and the policy check can only produce an allowed reply.
- Both operate on the produced reply, since the reply is the only thing the user sees.
- The first operates on the retrieved documents and the second on the tool call arguments, since those two processing stages are where the customer data moves.