Withholding the Completing Chunk: Deterministic Pair-Completion Guardrails for Streaming LLM Output
A narrower deterministic construction in which each output-danger signature is the conjunction of two lexical predicates, and before releasing each chunk, the guard scans the accumulated prefix and withholds the first chunk that makes both predicates observable.