policy-validation

YAML tool definitions are validated against immutable security policies using matimo_doctor, which checks schema correctness and compliance with domain, method, credentials, and namespace constraints to produce a structured validity result.

Immutable policy enforcement ensures that once a developer configures security policy rules for tool validation, agents cannot alter them, preventing unauthorized modifications to allowed domains, methods, credentials, and namespaces during execution.

SSRF is prevented during tool execution by enforcing immutable security policies through matimo_doctor, which validates that YAML tool definitions only target safe domains and approved execution types before deployment.

Yes, matimo_doctor validates YAML tool definitions for both schema correctness and compliance with policy constraints across domains, methods, credentials, and namespaces to ensure safe tool creation.

The best way to meet security policy requirements is to validate tool definitions with matimo_doctor, which provides structured error feedback on domain, method, credentials, and namespace checks to guide safe redesign.

YAML tool definitions fail policy validation when they violate immutable security policy constraints on domains, methods, credentials, or namespaces, with matimo_doctor producing structured results detailing the specific errors.