validate_policy
Validates a network policy spec, catching errors like empty allow lists, overly broad wildcards, and malformed host patterns. Ensures policy correctness before use.
Instructions
Sanity-check a policy spec without making any decision. Catches: empty allow list, overly broad "*" wildcards, malformed host patterns containing schemes/paths/queries.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| policy | Yes | A simplified network policy. Use { allow: ["api.openai.com", "*.example.com"] }. Optional: deny: string[], methods: string[]. |