Text this: Beyond Red-Teaming: Formal Guarantees of LLM Guardrail Classifiers