Preview
Check tool inputs before they run — block dangerous actions with clear rules, not hope that the model always behaves.
Sign in to read the full chapter.
Checking access…
Input Validation and Guardrails
Code panel
Input Validation and Guardrails
Contract
- Define run_sql and run_shell fakes
- Validate args before running (block DROP/DELETE/TRUNCATE and rm/del/format)
- Print [PASS] or [BLOCK] for each demo call
guardrails_demo.py
Highlighting…
Example console
Sample run — exact text can vary
Guardrail demos (fake tools — nothing real runs)
[PASS] run_sql('SELECT * FROM orders WHERE id = 4412') → (executed SQL) SELECT * FROM orders WHERE id = 4412
[PASS] run_shell('echo hello') → (executed shell) echo hello
[BLOCK] run_sql('DROP TABLE orders') — blocked dangerous SQL keyword: DROP
[BLOCK] run_sql('DELETE FROM orders WHERE id = 4412') — blocked dangerous SQL keyword: DELETE
[BLOCK] run_shell('rm -rf /tmp/orders') — blocked dangerous shell pattern: rm