I wonder if you could feed the generated assistant output to another model which has no other context from the other role tags and merely performs a policy review of the generation and flags violations.