Runs the guardrails over a submitted piece of agent text.

POST

/v1/m/security/guardrails/inspect

curl --request POST \
  --url https://example.com/v1/m/security/guardrails/inspect \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "agent_ref": "example", "enforce": true, "resource_ref": "example", "session_ref": "example", "surface": "example", "text": "example" }'

• this engine

Runs the guardrails over a submitted piece of agent text. It is the inline INSPECTION seam a caller (a model gateway, an orchestrator, an agent integration) uses; the module detects, produces findings with minimal evidence, and returns a DETECTIVE verdict — or a BLOCK only when inline enforcement is enabled and governed.

Authorizations

• bearerAuth

Parameters

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

agent_ref

Any of:

string

Trimmed and byte-capped.

string

null

null

enforce

Any of:

boolean

Requests blocking only when the tenant’s governed policy enables it.

boolean

null

null

resource_ref

Any of:

string

Trimmed and byte-capped.

string

null

null

session_ref

Any of:

string

Trimmed and byte-capped.

string

null

null

surface

required

After trimming, must be input, output, tool_args or tool_result.

string

text

Any of:

string

Inspected only in memory, never stored raw; capped at 1048576 UTF-8 bytes.

string

null

null

Example ^generated

{
  "agent_ref": "example",
  "enforce": true,
  "resource_ref": "example",
  "session_ref": "example",
  "surface": "example",
  "text": "example"
}

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}