| Prec. | Policy Name | Traffic Expression | Action | Status |
|---|---|---|---|---|
| 1000 | AI-Demo: Allow Sanctioned AI Gateway | http.request.host == "gateway.ai.cloudflare.com" | ALLOW | ● ACTIVE |
| 3000 | AI-Demo: Allow Workers AI Playground | http.request.host in {...} | ALLOW | ● ACTIVE |
| 3500 ★ | AI-Demo: Allow Google Gemini | any(http.request.domains[*] in {"gemini.google.com" "aistudio.google.com" "generativelanguage.googleapis.com"}) | ALLOW | ● ACTIVE |
| 4000 | AI-Demo: DLP Block PII in AI Prompts | any DLP profile match on AI providers | BLOCK | ● ACTIVE |
| 4500 ★ | AI-Demo: Block DeepSeek | any(http.request.domains[*] in {"deepseek.com" "api.deepseek.com" "chat.deepseek.com"}) | BLOCK | ● ACTIVE |
| 5000 | AI-Demo: Block Unsanctioned AI Applications | app in {ChatGPT, Claude, Perplexity, Mistral...} | BLOCK | ● ACTIVE |
| 6000 | AI-Demo: Block ALL AI (Content Category) | any(http.request.domains[*] in {AI category}) | BLOCK | ● ACTIVE |