Boundary Validation Over Unvalidated Input
Kind: algorithm
Record: algorithms:no-unvalidated-input
Canonical: Algorithms
Closure: Dependencies in load order
Parse and validate untrusted input at the boundary into a typed shape, failing fast on malformed data.
Listed in Algorithm contracts, after Secret Store Over Hardcoded Secrets and before Least Privilege Over Broad Privilege.