I think the unstated assumption is that there's a block list somewhere being fed into a guardian model's context