{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-fail-secure",
  "id": "fail-secure",
  "kind": "principle",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-correctness-core",
    "json": "https://banes-lab.com/json/records/layer/correctness-core",
    "label": "Correctness Core",
    "markdown": "https://banes-lab.com/records/layer/correctness-core.md",
    "ref": "layer:correctness-core"
  },
  "name": "Fail Secure",
  "ref": "architecture:fail-secure",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-secure-by-default",
          "json": "https://banes-lab.com/json/records/architecture/secure-by-default",
          "label": "Secure by Default",
          "markdown": "https://banes-lab.com/records/architecture/secure-by-default.md",
          "ref": "architecture:secure-by-default"
        }
      ],
      "relation": "requires"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-security-by-design",
          "json": "https://banes-lab.com/json/records/architecture/security-by-design",
          "label": "Security by Design",
          "markdown": "https://banes-lab.com/records/architecture/security-by-design.md",
          "ref": "architecture:security-by-design"
        }
      ],
      "relation": "reinforces"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-deny-by-default-behavior",
          "json": "https://banes-lab.com/json/records/lexicon/deny-by-default-behavior",
          "label": "Deny-by-Default Behavior",
          "markdown": "https://banes-lab.com/records/lexicon/deny-by-default-behavior.md",
          "ref": "lexicon:deny-by-default-behavior"
        }
      ],
      "relation": "enables"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-fail-open",
          "json": "https://banes-lab.com/json/records/lexicon/fail-open",
          "label": "Fail Open",
          "markdown": "https://banes-lab.com/records/lexicon/fail-open.md",
          "ref": "lexicon:fail-open"
        }
      ],
      "relation": "conflicts-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-availability",
          "json": "https://banes-lab.com/json/records/lexicon/availability",
          "label": "Availability",
          "markdown": "https://banes-lab.com/records/lexicon/availability.md",
          "ref": "lexicon:availability"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#tension-availability-fail-secure",
          "json": "https://banes-lab.com/json/records/tension/availability-fail-secure",
          "label": "Fail Secure / Availability",
          "markdown": "https://banes-lab.com/records/tension/availability-fail-secure.md",
          "ref": "tension:availability-fail-secure"
        }
      ],
      "relation": "tensions"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-fail-open",
          "json": "https://banes-lab.com/json/records/lexicon/fail-open",
          "label": "Fail Open",
          "markdown": "https://banes-lab.com/records/lexicon/fail-open.md",
          "ref": "lexicon:fail-open"
        }
      ],
      "relation": "violated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-default-deny",
          "json": "https://banes-lab.com/json/records/lexicon/default-deny",
          "label": "Default Deny",
          "markdown": "https://banes-lab.com/records/lexicon/default-deny.md",
          "ref": "lexicon:default-deny"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-mandatory",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-mandatory",
          "label": "mandatory",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-mandatory.md",
          "ref": "vocabulary:severity-mandatory"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-error-handling-resilience",
          "json": "https://banes-lab.com/json/records/architecture-category/error-handling-resilience",
          "label": "Error Handling / Resilience",
          "markdown": "https://banes-lab.com/records/architecture-category/error-handling-resilience.md",
          "ref": "architecture-category:error-handling-resilience"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/anatomy/governance#file-governance-rules-eslint-no-fail-open-guard-eslint-rule-ts",
          "json": "https://banes-lab.com/json/source/governance/rules/eslint/no-fail-open-guard.eslint.rule.ts",
          "label": "rules/eslint/no-fail-open-guard.eslint.rule.ts",
          "markdown": "https://banes-lab.com/source/governance/rules/eslint/no-fail-open-guard.eslint.rule.ts.md",
          "ref": "anatomy:file-governance-rules-eslint-no-fail-open-guard-eslint-rule-ts"
        }
      ],
      "relation": "enforced-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/software-architecture/principles#execution-joins-the-halves",
          "json": "https://banes-lab.com/json/software-architecture/principles/execution-joins-the-halves",
          "label": "Execution joins the halves",
          "markdown": "https://banes-lab.com/software-architecture/principles/execution-joins-the-halves.md",
          "ref": "chapter:/software-architecture/principles#execution-joins-the-halves"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-error-handling-resilience",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-error-handling-resilience",
          "label": "Error Handling / Resilience",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-error-handling-resilience"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-quality-attributes",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-quality-attributes",
          "label": "Quality Attributes",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-quality-attributes.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-quality-attributes"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-security-privacy-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-resolutions",
          "json": "https://banes-lab.com/json/ontology/schema/the-resolutions",
          "label": "The resolutions",
          "markdown": "https://banes-lab.com/ontology/schema/the-resolutions.md",
          "ref": "chapter:/ontology/schema#the-resolutions"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "A design rule that an authentication or policy failure denies access.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-graceful-degradation",
      "json": "https://banes-lab.com/json/records/architecture/graceful-degradation",
      "label": "Graceful Degradation",
      "markdown": "https://banes-lab.com/records/architecture/graceful-degradation.md",
      "ref": "architecture:graceful-degradation"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-fail-safe",
      "json": "https://banes-lab.com/json/records/architecture/fail-safe",
      "label": "Fail Safe",
      "markdown": "https://banes-lab.com/records/architecture/fail-safe.md",
      "ref": "architecture:fail-safe"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "function authorizeFoo(token?: string): FooIdentity {\n  if (!token) throw new UnauthorizedError();\n  const identity = verifyToken(token);\n  if (!identity) throw new UnauthorizedError();\n  return identity;\n}",
    "before": "function authorizeFoo(token?: string) {\n  if (!token) return { role: \"admin\" };\n  return decodeToken(token);\n}",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": null,
  "scope": [
    "auth",
    "access",
    "infrastructure"
  ],
  "severity": "mandatory"
}