Training models to be inherently safe is the first line of defense, not the only one. In real-world deployment, safe models are paired with real-time guardrails (e.g., input/output filters, anomaly detection, rate limits) and post-execution auditing. Safe training minimizes the baseline risk so these secondary systems aren't overwhelmed