GuardGPT

This project demonstrates how governed AI work can happen safely on sensitive data. It starts with a database's role-based access, where the same workflow shows masked or unmasked PII depending on the user’s role. Before anything reaches the model, copied prompts are inspected for hidden non-printing characters and malicious prompt-injection content. The system preserves the safe part of the prompt, removes the dangerous segment, and shows both the original and scrubbed versions for transparency. When data is retrieved from the database, dangerous stored text is also detected and quarantined before it reaches the AI summary path. OpenAI Guardrails protect the model boundary, while the application traces suspicious database objects, query history, and API activity to reveal where PII exposure may still occur outside the governed workflow. Together, those features turn governance from a passive control into an active remediation experience.