safe = vault.scan(text, redact=True).redacted_text Scan model output too , not just user input . The threat model changed the day agents started executing tool output . Untrusted text does not only come from users anymore : python result = vault.scan(model_output) Compose your own policy with per-scanner thresholds: python from llm_sentinel import Vault, SecretsScanner, PIIScanner, PromptInjecti...