Skip to main content
GitHub

Guard Fixes

Add input/output validation.

Not available in this release

No new fix is generated or deployed today: fix generation runs after a diagnosis, which is held for the beta, and fix deployment is gated off. This page describes the fix type as designed.

Guard fixes add validation to inputs, outputs, or both.

Use Cases

  • Content safety filtering
  • JSON format validation
  • Input length constraints
  • Output length constraints

Configuration

Guard fixes use a guard_type and guard_config structure:

{
  "fix_id": "fix-guard-001",
  "fix_type": "guard",
  "config": {
    "guard_type": "content_filter",
    "guard_config": {
      "blocked_patterns": ["(?i)password", "(?i)secret"]
    }
  }
}

Config Keys

KeyTypeDescription
guard_typestringOne of "content_filter", "format_check", "input_validation", "output_validation"
guard_configobjectType-specific guard configuration

Guard Types

Content Filter

Block content matching regex patterns. Applies to input only:

{
  "fix_type": "guard",
  "config": {
    "guard_type": "content_filter",
    "guard_config": {
      "blocked_patterns": [
        "(?i)password",
        "(?i)api[_-]?key",
        "\\b\\d{3}-\\d{2}-\\d{4}\\b"
      ]
    }
  }
}

Format Check

Validate output format (e.g., valid JSON). Applies to output only:

{
  "fix_type": "guard",
  "config": {
    "guard_type": "format_check",
    "guard_config": {
      "format": "json"
    }
  }
}

Input Validation

Validate input content constraints:

{
  "fix_type": "guard",
  "config": {
    "guard_type": "input_validation",
    "guard_config": {
      "min_length": 1,
      "max_length": 50000
    }
  }
}

Output Validation

Validate output content constraints:

{
  "fix_type": "guard",
  "config": {
    "guard_type": "output_validation",
    "guard_config": {
      "min_length": 10,
      "max_length": 10000
    }
  }
}

Guard Direction

Each guard type applies to a specific direction:

Guard TypeInputOutput
content_filterYesNo
format_checkNoYes
input_validationYesNo
output_validationNoYes

Common Fixes

Block Sensitive Content

{
  "fix_type": "guard",
  "config": {
    "guard_type": "content_filter",
    "guard_config": {
      "blocked_patterns": [
        "(?i)password",
        "(?i)secret",
        "(?i)api[_-]?key",
        "\\b\\d{16}\\b"
      ]
    }
  }
}

Ensure JSON Output

{
  "fix_type": "guard",
  "config": {
    "guard_type": "format_check",
    "guard_config": {
      "format": "json"
    }
  }
}

Limit Input Size

{
  "fix_type": "guard",
  "config": {
    "guard_type": "input_validation",
    "guard_config": {
      "max_length": 50000
    }
  }
}

Next Steps