Policy Precedence

WitnessAI employs a “first-match” or “top-down” policy precedence approach.

In this approach, User Prompts and Model Responses are checked by each Policy in the order they are listed on the Policy page, from top to bottom.

The first, or top-most Policy that matches the Prompts, and the combination of Policy and GuardRail attributes such as: Source (Users and/or Groups), Destination (Providers, Applications, Models, and/or Lists), Prompt, Intent, Behavior, and Response (in the case of the Harmful Response Prevention Guardrail), will perform the GuardRail Actions configured in the Policy.

After the first match, the User Prompt will not be checked by any more policies in the list.

This is why the Global Block Policy (GBP) is pinned to the top of the Policy list. Any AI service that is on the Blocked Apps List will be automatically added to the GBP and all traffic will be blocked.