# Risk classifier sensitivity

The risk classifier inspects outbound prompts for things that shouldn't leave — secrets,
personal data, prompt-injection attempts, and exfiltration-shaped tool sequences.

**Policy → AI risk classifier sensitivity** controls how aggressively it acts:

- **Low** — suppresses low-confidence signals, for a quieter feed.
- **Medium (recommended)** — records medium- and high-severity findings as warnings.
- **High** — the strictest setting.

Findings appear on the **Activity** screen either way; sensitivity changes what is acted
on, not what is recorded.

## Secrets are blocked regardless

A detected credential — an AWS key, a private key, a provider token — is blocked in the
request path independently of this setting. Sensitivity governs the softer signals.

## Reading the result

On **Activity**, a request with findings shows chips in the **Signals** column
(`aws_access_key_id`, `email_address ×3`, and so on) and its outcome is `Blocked` if
policy stopped it. Click through to the conversation when prompt capture is on.