If the output of a chain is a string, and it if the guardrails layer is blocking the input, or the output, the response format becomes a dict with the output key. There should be an option to always enforce a consistent format (either string or dict).