I think the content filter should be used as only a final check - a failsafe. I’m working on what I’m calling an ego microservice so that my project has a sense of self, identity. This will guide and shape the responses so that, ideally, it never even produces an unsafe output. This is more than just a chatbot persona. This is a system that can allow it to engage with any material and transmute it in such a way as to retain the values that I give it.
I know this is all very squishy language, but I’m in the middle of experiments so I’ll have more concrete information soon.