Safety & Security · Software component
Parameter Security Validator
Software componentSafety & SecuritySafety, Security & Governancearc:ParameterSecurityValidator
A pre-execution gate that checks tool parameters against the authenticated principal's authorization scope, sanitizes external inputs and detects attack patterns before tool invocation.
Responsibility. Prevents tool parameters from crossing authorization boundaries or carrying attack payloads.
Also known as: Security Validation Layer, Parameter safety check, Gateway parameter validation, Parameter sanitization policy
Relationships
invokes dependency
is invoked by dependency
guards control
Design guidance
- MUST verify the authenticated user owns referenced resources before authorizing actions such as transfers.
- SHOULD block destructive operations whose scope parameter targets entire tables or databases unless the request carries an explicit authorization token held only by senior administrators.
Classification
- Patterns
- BOLA/BFLA preventionInput sanitizationAttack signature detection (SQL injection, path traversal)
- Risks mitigated
- Broken object/function level authorizationSQL injectionPath traversalAgent used as attack vectorDestructive SQL queriesDirectory traversalServer-side request forgery (SSRF)Destructive operations from creative misinterpretation of vague instructions (e.g., 'clean up the database')
Sources
- Ch3.8: T. Nguyen, "Action Accuracy Metrics," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 3.8. ISBN: 9798244538229.
- Ch9.2: T. Nguyen, "Action Constraints and Permission Models," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.2. ISBN: 9798244538229.
- Ch10.5: T. Nguyen, "Human-over-the-Loop," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 10.5. ISBN: 9798244538229.
- Ref7.03: NVIDIA, "Overview," NVIDIA NeMo Guardrails Library Developer Guide. Accessed: Sep. 27, 2026. [Online]. Available: https://docs.nvidia.com/nemo/guardrails/about-nemo-guardrails-library/overview
- Ref9.04: "Safety Guardrails Implementation for Agent Systems," unpublished reference note (04-Safety-Guardrails-Implementation.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note