An OpenEnv-compliant RL environment that trains a small Defender LM to safely rewrite image-generation prompts — allow / transform / reject, per prompt, with intent preserved.