A healthcare company deploys a customer-facing chatbot on Amazon Bedrock. Compliance requires that the assistant never provide medical diagnoses, refuse to discuss competitor products, and automatically redact any patient email addresses or phone numbers that appear in user input before they reach the model. The team wants a configurable, model-agnostic way to enforce all of these controls without writing custom filtering code for each rule. Which approach best meets these requirements?