Back to Policy Packs
Image Generation Policy
Pre-action governance for AI image generation and image editing requests. Enforces provider allowlists, prompt metadata limits, referenced-image limits, output count limits, and output format restrictions without requiring raw prompts or image contents.
v1.0.0
Requirements
Required Capabilities
media.image.generate
Minimum Assurance Level
L0
Required Limits
allowed_providers
max_prompt_length
max_referenced_images
max_output_images
allowed_output_formats
Enforcement Rules
These rules are automatically enforced when using this policy pack
provider_allowlist_enforced
prompt_length_enforced
referenced_image_limit_enforced
output_count_enforced
output_format_restrictions_enforced
Best Practices
- Forward only image-generation metadata to policy evaluation; do not forward raw prompt text or image contents.
- Use allowed_providers to restrict generation to approved model providers.
- Use max_prompt_length to limit accidental prompt or data exfiltration.
- Set max_referenced_images to 0 unless the harness can separately authorize each local input image with data.file.read.v1.
- Use max_output_images and allowed_output_formats to control cost and artifact types.
- Audit provider, model, prompt length, reference count, output count, output format, size, and aspect ratio.