DENY/arg-caps
Argument caps violated
A tool argument exceeded a size, count, or shape cap declared in policy.
What it means
Argument caps are declarative bounds on tool inputs (max array length, max string bytes, forbidden fields). This deny fires when a call would violate one.
Common causes
- Prompt injected an oversized payload.
- Planner batching too many items into a single call.
How to fix
- Split the input into smaller calls.
- Widen the cap in policy only if the shape is safe.