BitRouter adds in-router context-aware guardrails

This is the right security boundary, though regex remains a brittle first layer rather than a complete defense.

• –Scanning tool results addresses indirect prompt injection that input-only filters miss.
• –Outbound response checks can stop credentials from reaching users or downstream systems.
• –In-router enforcement avoids extra model calls and keeps policies close to the execution path.
• –Regex rules are fast and auditable, but paraphrasing, encoding, and multi-step attacks can still evade them.
• –Developers should pair content filters with least-privilege tools, provenance tracking, and action-level approvals.