exa-policy-guardrails

# Exa Policy Guardrails ## Overview Policy enforcement for Exa neural search integrations. Exa searches the open web, so results may include unreliable sources, competitor content, or inappropriate material. This skill covers domain allowlists/blocklists (via Exa's `includeDomains`/`excludeDomains`), content moderation, query sanitization, freshness policies, and per-user budget enforcement. ## Prerequisites - `exa-js` installed and configured - Content policy requirements defined - Redis for per-user quota tracking (optional) ## Instructions ### Step 1: Domain Filtering (Built-in Exa Feature) ```typescript import Exa from "exa-js"; const exa = new Exa(process.env.EXA_API_KEY); // Exa supports up to 1200 domains in includeDomains/excludeDomains const TRUSTED_SOURCES = { medical: [ "pubmed.ncbi.nlm.nih.gov", "who.int", "cdc.gov", "nejm.org", "nature.com", "thelancet.com", ], technical: [ "github.com", "stackoverflow.com", "developer.mozilla.org", "docs.python.org", "nodejs.org", "arxiv.org", ], news: [ "reuters.com", "apnews.com", "bbc.com", "techcrunch.com", "arstechnica.com", ], }; const BLOCKED_DOMAINS = [ "competitor1.com", "competitor2.io", "spam-farm.com", "content-mill.net", ]; async function policySearch( query: string, category: keyof typeof TRUSTED_SOURCES | "general" ) { const opts: any = { type: "auto", numResults: 10, text: { maxCharacters: 1000 }, moderation: true, // Exa's built-in content mo...