SECAI Core · phase 7 of 15
Modality limit
Controlling which type of input and output a model can handle
The Explain card
- Plain English
- A modality limit controls which types of input and output a model is allowed to handle, such as text only, or text and images but not audio or file generation.
- Example
- A customer support assistant is restricted to text. Disabling image input means an attacker cannot upload a screenshot containing hidden instructions, and removing file output prevents it from generating executables.
- Why it matters
- Every modality is an attack surface with its own injection tricks. Limiting the model to what the use case needs shrinks that surface, and it is a cheap control to apply.
- Hook
- Modality limit: if the job only needs text, do not give the model eyes and hands.
Where it sits in the deck
Phase 7: AI-Specific Runtime Controls: Guardrails, Limits, and Enforcement
Responsible AI principles must be enforced mechanically — learn the runtime controls that constrain model inputs, outputs, and resource consumption.
