A production LLM application is more than the base model. Guardrails are the layers of policy, classifiers, and prompts that block harmful outputs, redact secrets, and enforce brand tone. Attackers probe these layers with jailbreaks — prompts crafted to bypass instructions. Defense is never perfect; the goal is to reduce risk measurably and to log incidents for iteration.