Observed

Source-reviewed: guardrails exist and run in some configurations, but multiple configuration paths had documented non-enforcement windows: GUI/API-defined guardrails never invoked (#15584, vendor-closed completed 2025-10-17), model-level guardrails not taking effect (#18363, vendor-closed completed 2026-01-16), passthrough post_call guardrails skipped (#20270, vendor-closed completed 2026-04-27) — vendor closures not TD-re-verified; intermittent content-filter failures were stale-bot closed without fix (#19637, not-planned 2026-05-01); the custom-code guardrail test endpoint had a sandbox escape (GHSA-wxxx-gvqv-xp7p, High, affects v1.81.8-v1.83.9, patched v1.83.10+). The reported Bedrock guardrail bypass (#22949) was re-verified by TD as a reporter configuration error, not a code defect.