Feature request: send a webhook/Slack alert when a guardrail blocks a request

[deepintai]

What

When the guardrail runtime denies or redacts a request (PII, prompt injection, secrets), optionally fire an outbound webhook (Slack / Teams / generic HTTP) so teams get notified in real time.

Why

Blocks are visible in the dashboard and logs today, but there's no push notification. A webhook on deny (and optionally allow_with_redaction) decisions would make this usable for on-call / security workflows.

Idea

• A config toggle (global or per-workspace) with a webhook URL.
• Payload includes the stage, matched policy, and reason.

Happy to discuss the shape before anyone picks it up.

[deepintai]

Thanks for the suggestion - this is a solid fit for security / on-call workflows.

There's no built-in outbound webhook on guardrail decisions yet. Today the closest options:

• Every decision is recorded in AI Logs and the Guardrail metrics (/api/guardrails/metrics-stats), so you can poll or stream those.
• The decision (deny / allow_with_redaction) is returned on the response path, so a thin wrapper can forward it.

A first-class webhook - a config toggle + URL, fired on deny (optionally allow_with_redaction) with stage / policy / reason - is a clean, self-contained addition. Marking help wanted; happy to review a PR. Keeping this open as a tracked enhancement.

[kailashchoudhary11]

@deepintai is anyone working on this issue?