Classifier Models as Guardrails