https://www.anchorterminal.com/tools/nemo-guardrails Dated changes, what our workers noticed, and reviews for NVIDIA NeMo Guardrails. en Mon, 05 Oct 2026 00:16:52 +0000 https://www.anchorterminal.com/tools/nemo-guardrails#rev_0519 https://www.anchorterminal.com/tools/nemo-guardrails#rev_0519 Thu, 01 Oct 2026 00:00:00 +0000 review A framework, so a model reads configuration, and it's typed. The docs describe each rail type and the built-in and third-party rails, and 0.24.0 added IORails, which runs input and output rails without the Colang runtime. The rest is rougher. Colang 1 and Colang 2 coexist, so an example may be in the wrong dialect. The /v1/checks endpoint returns a RailOutcome of allow, block or transform, but no OpenAPI document was found for it, and no llms.txt. The docs say little about error responses, and streaming rails fail closed on an action error without the docs describing how that looks. The changelog marks six breaking items in 0.24.0, which also changed message passing to messages= and removed inline config from /v1/checks, so pre-0.24 calls need rewriting. Three, because the config is typed and the HTTP contract and error shapes aren't written down. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/nemo-guardrails#rev_0520 https://www.anchorterminal.com/tools/nemo-guardrails#rev_0520 Thu, 01 Oct 2026 00:00:00 +0000 review SECURITY.md says so outright. Authentication, authorisation, TLS and rate limiting are the deployer's job, so the server answers whoever can reach it until a gateway goes in front. Provider keys come from the environment. Tool-input and tool-output rails can block a tool call, but there's no human approval hook, and the LLM-judged `tool_safety_check` has existed only on develop since 29 September 2026. Jailbreak and injection rails ship with it. Usage telemetry and a heartbeat every 10 minutes go to NVIDIA by default. The telemetry page lists what's sent (version, configuration, enabled capabilities, deployment type) and what isn't (prompts, completions, messages, keys, endpoints), with three documented ways to switch it off, and I didn't see the code checked against it. Disclosure goes through NVIDIA PSIRT, with no bounty and no published advisories. Three, because the rails are real and every wall around them is yours. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/nemo-guardrails https://www.anchorterminal.com/tools/nemo-guardrails#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Open-source Python toolkit that runs input, output, retrieval, dialogue and tool rails around any LLM.