University

Departments adopt tools faster than any central office can review them. On a campus that means student records reach a model through a route nobody chose. The starter puts a first common floor under that traffic. It checks identity, masks record patterns, screens terms with a default list, and scores what comes back.

A campus runs many workloads under one policy. Admissions, advising, financial aid, research administration and the help desk all touch student records under different rules. A technology lead needs one baseline that covers the common floor and leaves room for local rules. This starter is that baseline and not a finished configuration.

Ten controls run in order, and the request side carries most of them. Injection screening opens the chain so a pasted instruction cannot switch off the rules behind it. An access rule then refuses a caller without verified identity claims, even though it arrives without custom roles. A student record privacy stage follows. Redaction masks student or pupil numbers, and it also matches phrases such as grade record, grade transcript and disciplinary file.

Term screening sits after redaction with an empty block list. That means the built in default terms apply, and nothing campus specific is blocked until you add your own words. A keyword list is a blunt tool for a university anyway. Academic freedom and a term filter need a local conversation before you extend the list.

The response path is where quality is judged. A bias signal is available as a configuration point without a custom threshold. Source checking measures grounding and flags a thin citation without refusing the text. Output scoring uses a combined floor of 0.85, relevance at 0.78 and accuracy at 0.80, and it also rejects a reply under 120 characters. The default action on a failed score is refusal.

Two open items remain before you deploy. Human review ships as an empty point, so nothing escalates to a dean, registrar or faculty reviewer until you configure it. Audit marking flags an allowed request and stores nothing, which leaves records retention as a separate campus decision. Pick the Student Assessment starter when the scope is grading and placement work alone rather than the whole campus.