A retail company wants to use a foundation model to generate product descriptions. Legal requires that the model never produce outputs containing competitor brand names. Which mechanism is the most direct way to enforce this constraint at the application layer?
- AReduce the model's temperature to zero so it always picks the highest-probability token, making competitor names statistically unlikely.
- BFine-tune the foundation model on internal product data only, so the model's weights no longer associate competitor brand names with product description tasks.
- CUse a larger foundation model with higher reasoning capability, because larger models are better at following nuanced instructions to avoid competitor references.
- DApply output guardrails that scan generated text and block or redact any response containing prohibited brand names before it reaches the user. Correct
Why A is wrong: Greedy decoding (temperature 0) selects the most probable token at each step but cannot guarantee exclusion of specific words. Competitor names may still appear if they are highly probable in context.
Why B is wrong: Fine-tuning can shift output distributions but does not reliably eliminate specific outputs. The model retains knowledge of competitor names from pre-training and may still generate them in novel contexts, so this approach does not provide the deterministic enforcement legal requires.
Why C is wrong: Model size improves general instruction-following but is probabilistic. A larger model may comply more often, but compliance is not guaranteed on every call. Guardrails provide the deterministic enforcement the question calls for.
Why D is correct: Guardrails act as a post-generation filter at the application layer, providing a deterministic enforcement mechanism independent of model probabilities. This directly satisfies the legal requirement by intercepting non-compliant outputs before delivery.