The Gatekeeper and the Three-Layer Filter

Where it starts: the weight of one sentence

The moment a guestbook opens, something easily overlooked happens: every word a stranger writes gets hung on your door.

A personal site has exactly one signatory — its owner. A visitor leaves a sentence, search engines index it, strangers read it, and the responsibility lands on the holder of the domain. The internet does not lack for people who will never break your door — they will simply stick notes on it. Some notes carry a price counted in the real world.

So content safety on this planet is not a nice-to-have layer of moderation. It is foundation engineering, with a single principle: rather decline a hundred, never let one through.

Filter one: the blocklist

The oldest and most dependable technology: a list.

Political figures, events, and positions — even a bare mention; threats of violence, weapons and drugs, obscenity, personal attacks, spam links. One hit, and the message never enters public view. Above the list sits a layer of normalization: strip spaces and separators before matching, and the “s p a c e d out” variants fall apart in front of it.

A list will misfire. The cost of a misfire is kept as small as possible: a flagged sentence doesn’t vanish — it simply enters the dark room first, where the keeper sees every one of them and can bring any back.

Filter two: the AI verdict

A list catches the words on it — not the infinite variations off it. The second layer hands the sentence to a small model that has read in every language: Chinese, English, Japanese, Korean, one standard.

Its ruling has only three destinations: clean, and the star lights up immediately; the slightest doubt, and it enters the dark room; even when the model itself errs — it enters the dark room too. There is no “roll the dice” in this system. Exception means conservative. That is this mechanism’s character, not its flaw.

Filter three: the keeper

The last layer is a person. Behind a small door with a token lies the panorama of every message: who, when, what was said, and why it was judged. Pending ones are brought back here; the over the line are destroyed here.

The verdict’s reasoning is visible only behind that door — reasoning is a tool for the keeper, not a road sign for trespassers.

The art of silence

The most refined part of this mechanism is what it doesn’t tell visitors.

When a message enters the dark room, the visitor sees one calm line: “Once approved, this star will light up.” No “blocked,” no “triggered a rule,” no layer, no word. Probers get no feedback they can iterate on — silence is not concealment; it is refusing to draw a map for the ones pounding on the gate.

One field rule

On a public square, wide gates look good; narrow gates stay safe. A gate can be narrow — as long as the key stays in your own hand. Better a star that lights up slowly than a dangerous one hung on your own sky.