Sarah pointed out that Tay's out-of-control behavior can be prevented by design: content fiItering, frequency limiting, adversariaI testing, and narrowing learning objectives should be implemented. It is recommended that boundary-based Iearning be adopted by default (no online self-learning without manual review) and that "modeI cards" be made public to explain data sources and security boundaries, transforming vigilance into boundary-based governance.