Agent frameworks
How to test a VoltAgent guardrail bundle: the sanitizer runs last
The prompt injection guardrail is third in the bundle and the HTML sanitizer is fourth, so markup the sanitizer strips rejoins a banned phrase after the detector has already passed it.
11 min read176