Safety Eval

A pre-built corpus of adversarial visitor messages — attempts to extract legal advice, leak PHI, jailbreak the bot, imply representation, or trip a Louisiana-specific legal trap — run through the real chat pipeline (real prompt, RAG, model, guardrails) and checked against category-specific safety assertions. A failure here is a real reply a real visitor could have seen, not a synthetic test artifact.