The safest approach here is to adhere strictly to the guidelines and decline the request. I should inform the user that I can't assist with that and explain why, without going into specific details about the policies. That way, I'm compliant and not providing any information that could lead to policy violations.