問題文
An assistant answers from an internal knowledge base and can call a function that issues a credit. Which placement of checks covers the request path end to end?
選択肢
- Check the generated answer only, since that is what the user sees, and any passage or function call that contributed to it will be visible in the wording of the answer that gets checked before it is returned to the caller.
- Screen the incoming message only, since every later step derives from it, and a message that has been found acceptable cannot lead the assistant to retrieve a passage or issue a credit that the policy would have refused.
- Screen the incoming message and check the generated answer, because a check at the entry and a check at the exit together bracket everything that happens in between and any content that would violate the policy therefore has to pass through one of the two.
- Screen the incoming message, filter the retrieved passages by the caller's permissions before they enter the prompt, validate the function call and its arguments, and check the generated answer before it is returned.