# Layer content safety

Go beyond the built-in Prompt Guard patterns from [Add guardrails and a budget](/products/affinidi-trust-fabric/agent-stream/get-started/add-guardrails-and-budget.md): preserve context in masked data, catch free-form PII a regex cannot express, and layer a pre-call and post-call review on top of pattern matching. Field-level reference for every guardrail block is in [Guardrails →](/products/affinidi-trust-fabric/agent-stream/reference/surfaces/guardrails.md).

| Guide | What you will achieve |
| [Pseudonymize PII with NER IDs](/products/affinidi-trust-fabric/agent-stream/how-to-guides/guardrails/pseudonymize-pii-with-ner-ids.md) | Replace matched PII with stable NER ID pseudonyms instead of a static placeholder, so a model can still reason over which values belong together, then restore the real values in the response. |
| [Detect free-form PII with AI matching](/products/affinidi-trust-fabric/agent-stream/how-to-guides/guardrails/detect-free-form-pii-with-ai-matching.md) | Add a model-backed PII detector to a surface so names, addresses, and other free-form values are caught even when no regex pattern matches them. |
| [Block and re-review calls with Judge and Jury](/products/affinidi-trust-fabric/agent-stream/how-to-guides/guardrails/block-and-re-review-calls-with-judge-and-jury.md) | Add a Judge pre-check that stops an unsafe request before the model is called, and a Jury post-review that can approve, block, or regenerate the response before it returns. |

## Pages in this section
- [Pseudonymize PII with NER IDs](/products/affinidi-trust-fabric/agent-stream/how-to-guides/guardrails/pseudonymize-pii-with-ner-ids.md): Replace matched PII with stable NER ID pseudonyms instead of a static placeholder, so the model still reasons over which values belong together, then restore the real values before the response reaches the caller.
- [Detect free-form PII with AI matching](/products/affinidi-trust-fabric/agent-stream/how-to-guides/guardrails/detect-free-form-pii-with-ai-matching.md): Add a model-backed PII detector to a surface's Prompt Guard so names, addresses, and other free-form values are caught even when no regex pattern matches them.
- [Block and re-review calls with Judge and Jury](/products/affinidi-trust-fabric/agent-stream/how-to-guides/guardrails/block-and-re-review-calls-with-judge-and-jury.md): Add a Judge pre-check that stops an unsafe request before the model is called, and a Jury post-review that can approve, block, or regenerate the response before it returns.