Content Filter Triggered on Innocent Input

Three different mechanisms produce what looks like one refusal, and the HTTP status plus finish_reason tells you which of the three you are arguing with.