OpenAI has two models. One is an input sanitization model. The other is the ChatGPT model itself. I wouldn't be surprised if there is only one input sanitization model that has been researched since GPT-1/2. I think it's also constantly iterated over to detect the violating input