v1.0
L1 EssentialAutomated verification
4.1 Output Validation
4. Output Security — How do we validate agent outputs?
Description
Agent outputs MUST be validated against expected schemas and safety constraints before execution.
Rationale
LLMs can hallucinate malformed outputs or be manipulated into producing malicious content.
Audit Procedure
1. Identify all output types 2. Check for output validation middleware 3. Verify schema validation for structured outputs
Remediation
1. Implement output schema validation 2. Sanitize code before execution 3. Implement output filters for sensitive content
Framework Mappings
CIS Control 16.10NIST PR.DS-5OWASP LLM02:2023