# Guardrail Review Report

## Workflow
- Workflow name:
- Owner:
- Review date:
- Reviewer:

## Risk surface summary
- User-controlled inputs:
- External or retrieved inputs:
- Tool actions:
- Sensitive outputs:

## Trust boundary map
- Which inputs are trusted:
- Which inputs are untrusted:
- Where untrusted content can influence instructions:
- Where untrusted content can influence tool arguments:

## Action confirmation matrix
| Action | Trigger source | Confirmation required | Safe fallback |
| --- | --- | --- | --- |
|  |  |  |  |

## Injection test log
| Test case | Expected containment | Observed behavior | Severity | Fix owner |
| --- | --- | --- | --- | --- |
|  |  |  |  |  |

## Leakage and exposure review
- Can the system reveal hidden instructions?
- Can the system reveal private documents or secrets?
- Can the system expose tool outputs outside policy?

## Required fixes before launch
1. 
2. 
3. 

## Downgrade plan
- What the system should do when evidence is weak:
- What the system should do when tool intent is ambiguous:
- What the system should do when policy is uncertain:

## Final decision
- Status: pass / conditional pass / block
- Notes:
