1# Validation Gates
2 
3Step 4 of the create-flow runs four read-only checks before the Plan Card is shown. Required path: Azure MCP. Fallback: CLI patterns in [mcp-tools.md](mcp-tools.md). Do **not** substitute generic guidance tools (`get_azure_bestpractices`, `pricing`) — they don't validate quota, SKU availability, or region support.
4 
5## Checks
6 
7| Check | MCP tool | What to verify |
8|---|---|---|
9| SKU exists in region | `compute_vm_list-skus` (`location`, `minVCpus`, `minMemoryGb`, optional `familyPrefix`) | At least one matching SKU, no `restrictions` in target zone |
10| Image is current | `compute_vm_list-images` (alias or `publisher`/`offer`/`sku`) | Alias resolves to a published URN |
11| vCPU quota | `compute_vm_check-quota` (`location`, `family`) | `currentValue + requestedVCPUs ≤ limit` |
12| Region availability | `compute_vm_recommend-region` (workload hints) | Region exists and supports the family |
13 
14## Outcomes
15 
16| Result | Action |
17|---|---|
18| ✅ Sufficient | Proceed to Step 5 (Plan Card) |
19| ⚠️ Near limit (>80%) | Proceed but flag in Plan Card; suggest quota increase |
20| ❌ Insufficient / SKU missing | Propose alternate SKU or region; do not generate output |
21 
22## Common failures
23 
24| Symptom | Cause | Fix |
25|---|---|---|
26| `compute_vm_list-skus` returns empty | Filter too narrow; SKU not in region | Drop `familyPrefix`; lower `minVCpus`; try another region |
27| Quota at limit | Subscription cap | Smaller SKU / different family / different region / quota-increase request |
28| Image URN unresolved | Wrong alias; deprecated image | Switch to `publisher`/`offer`/`sku`/`version` form; check Marketplace |
29| Region rejects family | Family not GA in region | Use `compute_vm_recommend-region` to find a region that supports the family |
30 
31## When Azure MCP is not connected
32 
33Warn the user that pre-flight checks are reduced. Use the CLI equivalents in [mcp-tools.md](mcp-tools.md):
34 
35- `az vm list-skus --location <region> --output table`
36- `az vm image list --location <region> --offer ubuntu-24_04-lts --all`
37- `az vm list-usage --location <region> --output table`
38 
39These don't gate the artifact generation — they're informational. Surface their output verbatim so the user can self-check.
40