How to meet it
OWASP AISVS v1.01
Orchestration & Agentic Security · Component Isolation and Tool Authorization
Enforce what tools declare
Verify that the runtime enforces the privileges, resource limits, and output-validation requirements declared in tool manifests.
OWASP AISVS v1.01, requirement 9.3.4
In plain English
The runtime must enforce what each tool's manifest declares, so a tool cannot use more access or resources than it asked for.
What good looks like
- The runtime grants permissions from the manifest only.
- Limits from the manifest are applied.
- Output validation from the manifest runs on every call.
How teams usually do it
- Deployment tooling that generates runtime policies from manifests.
Evidence an auditor would accept
- Generated policies and tests.
Common mistakes
- Manifests that are documentation only, with nothing enforcing them.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.