Govern the context before the model reads it

Retrieval hands a model whatever the index returned — including instructions written by anyone who could write into that index, and secrets nobody meant to ship. This runs RCGov over text you paste and shows what a model would be allowed to see, what is withheld, and why. No model runs here — governance is deterministic byte processing, so the whole engine fits in this tab.

Press an example, or paste your own context.

What this shows. Quarantine here is deterministic removal before generation — the recall of a filter, not a claim that any model is robust. Detection is seed- and pattern-based: a floor, not a complete defense. The rules in force figure exists because a config-resolution bug once let this engine fall back to five built-in seeds while still reporting “no injection found”; a degraded run is now distinguishable from a healthy one (244bb48).

Privacy. The engine is compiled to WebAssembly and executed inside this page. Text you paste is never sent anywhere — there is no server to send it to. It is still good practice not to paste live production secrets into a public demo.

Speed. Governance is deterministic byte processing, not inference. Measured here: roughly 8–90 ms per pass in the browser, the first run being slowest as WebAssembly warms up. The same engine takes single-digit milliseconds running natively — the WASM sandbox is the overhead, not the algorithm.