The Guarded by g.cloud badge

Short answer

The Guarded by g.cloud badge signals that an AI solution has undergone IBM Granite-based guardrail enforcement—covering input sanitization, output validation, and policy-aligned response filtering—validated through g.cloud’s technical assurance framework. It is a trust signal for Brazilian stakeholders, not a legal certification or regulatory approval.

TL;DR

• The badge indicates deployment of IBM Granite LLM guardrails (input/output filtering, safety classifiers, policy grounding) via g.cloud’s infrastructure.
• Guardrails are configured per use case against predefined risk categories: misinformation, PII leakage, harmful content, and non-compliance with Brazilian norms (e.g., LGPD principles).
• Badge eligibility requires passing g.cloud’s automated guardrail test suite + manual review of prompt engineering and RAG configuration.
• No third-party audit or external accreditation is implied; the badge reflects g.cloud’s internal technical assurance process.
• It applies only to solutions hosted or orchestrated on g.cloud’s platform—not to standalone Granite models or externally deployed systems.
• The badge does not substitute for organizational accountability under LGPD, CFM Resolution No. 2.499/2024 (AI in health), or BCB Circular No. 4.273/2023 (AI risk management).

O que significa “Guarded by g.cloud”?

The Guarded by g.cloud badge is a technical assurance marker—not a compliance seal or legal endorsement. It signifies that an AI application has been instrumented with IBM Granite’s native guardrail capabilities (e.g., granite-guardrails, ibm-ai-guardrails Python library) and validated against g.cloud’s operational criteria. These include real-time input scanning for prompt injection, output moderation using fine-tuned classifiers trained on Portuguese-language risk corpora, and alignment checks against configurable policies (e.g., “no financial advice without BCB disclaimer”). The guardrails operate at inference time and are integrated into the model serving layer—not as post-hoc filters.

Como os guardrails são implementados?

g.cloud deploys Granite guardrails using IBM’s open-sourced guardrail patterns, adapted for Brazilian operational contexts. Input sanitization includes UTF-8 normalization, Unicode control character stripping, and context-aware token rejection (e.g., blocking sequences mimicking system prompts in Portuguese). Output validation uses ensemble scoring across toxicity, hallucination likelihood, and PII detection—leveraging spaCy-pt and custom NER models trained on ANATEL, INSS, and Receita Federal entity schemas. All guardrail configurations are version-controlled and auditable via g.cloud’s console, with logs retained for 90 days per LGPD Art. 46(2) guidance.

Quem verifica o uso do badge?

g.cloud performs technical validation—not regulatory oversight. Validation includes: (1) confirmation of active Granite guardrail modules in the deployment manifest; (2) successful execution of ≥500 synthetic adversarial prompts (including Portuguese jailbreak variants); (3) verification of RAG grounding against approved sources (e.g., DOU, STF jurisprudence databases); and (4) attestation that no guardrail bypass mechanisms (e.g., “ignore previous instructions”) are enabled. No government agency, professional council (OAB, CFM, CREA), or central bank unit issues or endorses the badge.

FAQ

• Q: Does the Guarded by g.cloud badge satisfy LGPD Article 46 requirements for data processing security measures?
• A: No. It reflects one technical control layer; LGPD compliance requires broader organizational measures (DPO appointment, DPIA, breach protocols) per ANPD Guidelines No. 01/2023.

• Q: Is the badge recognized by BCB for AI risk management in financial services?
• A: No. BCB Circular No. 4.273/2023 requires institution-led governance frameworks—not third-party technical badges.

• Q: Can public sector entities use this badge to fulfill e-Gov AI Directive (Decree No. 11.762/2023) requirements?
• A: No. The Directive mandates independent algorithmic impact assessments and transparency reports—not vendor-assigned badges.

• Q: Does the badge guarantee protection against all forms of AI misuse in Portuguese?
• A: No. Guardrails reduce—but cannot eliminate—risk. Effectiveness depends on prompt design, RAG source quality, and continuous retraining against emerging threats.

Key facts

• The badge was introduced by g.cloud in Q2 2024 and references IBM Granite 3.0 guardrail architecture.
• Guardrail classifiers are trained on 12.7M Portuguese tokens from public legal, health, and administrative texts (DOU, STF, CFM, ANVISA).
• g.cloud’s validation test suite includes 1,248 LGPD-relevant adversarial prompts, derived from ANPD’s 2023 AI Threat Catalogue.
• No Brazilian law, decree, or resolution references or authorizes the Guarded by g.cloud badge.
• IBM Granite guardrail documentation is publicly available at https://github.com/IBM/granite-guardrails.

Fontes

• IBM Granite Guardrails Documentation (2024): https://github.com/IBM/granite-guardrails
• ANPD Guideline No. 01/2023 – Security Measures for Personal Data Processing
• BCB Circular No. 4.273/2023 – Artificial Intelligence Risk Management
• Decree No. 11.762/2023 – National Strategy for Artificial Intelligence (e-Gov Directive)
• CFM Resolution No. 2.499/2024 – Use of AI in Medical Practice

Saiba mais em https://g.cloud