Infrastructure · Verification
InputGuard
Input validation and sanitization
Definition
Mechanism
A validation filter that sanitizes inputs before they reach a sensitive component. It enforces schema compliance, type safety, and constraint satisfaction. On violation it applies FailClosed behaviour, rejecting the input and logging the attempt.
Invariants
- Declares the schema or constraint it enforces.
- Names the component it guards.
- No input reaches the guarded component without satisfying that constraint.
Risks
Failure modes
Bypass via unexpected encoding or type coercion.
Overly permissive schema allows malformed input through.
Caution
Validation boundary — bypass enables injection or unexpected state.
Relationships
Builds on
References
Default-deny policy for uncertain states
Used by
Composes with
Society
Isolate agent execution with resource limits and egress controls
Society
Sequential LLM calls with validation gates
Execute external tool and observe result
References
Society
Ingest only what is strictly necessary
Mind
Detect shortcuts that break downstream invariants
Reference