Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
TelemetryArea: what it touches
Internal ChangesKind: in v2.1.225,
Internal ChangesSection of the release
What
The two-stage prompt-injection and safeguard classifier now records when the model stopped with a refusal, which previously looked identical to an ordinary parse failure.
Details
The parse-failure event now carries stopReason plus failureKind: "policy_refusal".
The block result itself carries refusedBySafeguard.
Evidence
refusedBySafeguard
Strings lifted out of the shipped bundle, so the claim above can be checked against them.