Open constitutional input-prompt guards on Qwen3.5 — multilingual safe/unsafe + category classification