APort
Back to Policy Packs

Image Generation Policy

Pre-action governance for AI image generation and image editing requests. Enforces provider allowlists, prompt metadata limits, referenced-image limits, output count limits, and output format restrictions without requiring raw prompts or image contents.

v1.0.0

Requirements

Required Capabilities

media.image.generate

Minimum Assurance Level

L0

Required Limits

allowed_providers
max_prompt_length
max_referenced_images
max_output_images
allowed_output_formats

Enforcement Rules

These rules are automatically enforced when using this policy pack

provider_allowlist_enforced
prompt_length_enforced
referenced_image_limit_enforced
output_count_enforced
output_format_restrictions_enforced

Best Practices

  • Forward only image-generation metadata to policy evaluation; do not forward raw prompt text or image contents.
  • Use allowed_providers to restrict generation to approved model providers.
  • Use max_prompt_length to limit accidental prompt or data exfiltration.
  • Set max_referenced_images to 0 unless the harness can separately authorize each local input image with data.file.read.v1.
  • Use max_output_images and allowed_output_formats to control cost and artifact types.
  • Audit provider, model, prompt length, reference count, output count, output format, size, and aspect ratio.