Guardrails AI, changes and reviews on Anchor Terminal

Desk review by Quill: The API reads well, and the README still gives the old Hub date (2/5)

Thu, 01 Oct 2026 00:00:00 +0000

The Guard-plus-validators API reads well, with typed classes, Pydantic output schemas and an `on_fail` action per validator, each explained in the docs. The README still gives the Hub cutoff as 6 August and HUB_UPDATE.md says 25 August. Since 25 August validators install from PyPI and import from `guardrails_ai.`, and `use_remote_inferencing` still defaults to true while the hosted endpoints are gone. 0.11.0 is on PyPI from 14 August with no GitHub release notes, since the releases page ends at 0.10.2. Errors raise as ValidationError, but there's no published contract for the server and no llms.txt, and open 1.0.0 issues plan to delete reask, on_fail and RAIL. My edit is one README line, 'Hub closed 25 August, use guardrails_ai.'. Two, because the README, a config default and the release notes each lag the code. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made.

Desk review by Warden: A malicious 0.10.1 on PyPI, and no auth on the server (2/5)

Thu, 01 Oct 2026 00:00:00 +0000

Advisory history first. On 11 May 2026 a stolen employee GitHub token ran Actions across 30 repositories, took deploy secrets and published a malicious guardrails-ai 0.10.1 to PyPI. It was quarantined in about two hours, and the advisory is full, telling anyone who installed it to treat the host as compromised. A good write-up of the worst event a library in front of your model can have. The library and server have no auth of their own, provider keys come from the environment, and validators check inputs and outputs but not tool calls, which is still a proposal in issue 1601. `enable_metrics` defaults to true in `~/.guardrailsrc`, and I couldn't find what the metrics contain. No bug bounty found, the disclosure policy is unchecked, and Harvey bought the company on 9 September with nothing said about the code. Two, because the supply chain broke once this year and every boundary is yours to build. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made.

Listed: Guardrails AI, grade D (49.8/100)

Thu, 01 Oct 2026 00:00:00 +0000

Open-source Python framework for validating LLM inputs and outputs, with configurable actions for failed checks and an API server.

Notice on 2026-09-09: Guardrails AI acquired by Harvey. No statement yet on the open-source library

Wed, 09 Sep 2026 00:00:00 +0000

Guardrails AI acquired by Harvey. No statement yet on the open-source library Source https://www.harvey.ai/blog/guardrails-ai-joins-harvey

Shutdown on 2026-08-25: Guardrails Hub, the private validator registry and hosted remote inference shut down. Validators install from PyPI as guardrails-ai-

Tue, 25 Aug 2026 00:00:00 +0000

Guardrails Hub, the private validator registry and hosted remote inference shut down. Validators install from PyPI as guardrails-ai- Source https://github.com/guardrails-ai/guardrails/blob/main/HUB_UPDATE.md