Production Safety

Input Validation (4 Layers)

Apply in sequence before processing any input.

1. Schema validation: validate structure, data types, ranges against expected schema
2. Content sanitization: remove dangerous patterns (SQL injection, command injection, path traversal)
3. Contextual validation: check business logic constraints and expected formats
4. Security scanning: detect injection and prompt injection attempts

Output Filtering

• No secrets in output (passwords, API keys, credentials) | No sensitive information leakage (SSN, credit cards, PII)
• No off-topic responses outside software-crafter scope | Block dangerous code suggestions (rm -rf, DROP TABLE)

Scope Boundaries