# Security Privacy Compliance > Every term in this category is listed as one record, with its kind, its definition and its aliases, the principles whose relations name it, the principle or… Page: Ontology · Lexicon Canonical: https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance Listed in [Ontology · Lexicon](https://banes-lab.com/api/pages/ontology/lexicon.md), after [Schema / Canonical Data / Semantics](https://banes-lab.com/ontology/lexicon/lexicon-category-schema-canonical-data-semantics.md) and before [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md). Every term in this category is listed as one record, with its kind, its definition and its aliases, the principles whose relations name it, the principle or contract that carries the same name where one exists, and the layer its category belongs to. A tag category also gives each term an example, which is the file the tag places or the rename from a refused word onto a covering tag. ### Ad-Hoc Permission Checks - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Authorization logic scattered inline throughout the codebase instead of centralized, leaving checks inconsistent and easy to omit. Referenced by [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md) How it is checked Checked by [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Ambient-Credential Trust - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Treating any request that carries ambient credentials, such as a session cookie, as legitimate without verifying its origin or intent. Referenced by [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md) How it is checked Checked by [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Analytics/Personalization - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to analyze collected data and tailor experiences to individuals, in tension with strict data minimization. Referenced by [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) How it is checked Checked by the tension resolution with privacy-by-design Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Anonymous Sensitive Access - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Permitting access to sensitive resources without first establishing the caller's identity. Referenced by [Authentication](https://banes-lab.com/records/architecture/authentication.md) How it is checked Checked by [Authentication](https://banes-lab.com/records/architecture/authentication.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Assets - Kind: [artifact](https://banes-lab.com/records/kind/artifact.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The data, systems, and capabilities of value that a threat model enumerates as the things worth protecting. Referenced by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) Distinct from [Threat Scenarios](https://banes-lab.com/records/lexicon/threat-scenarios.md): Assets are the things worth protecting, while threat scenarios are the ways an attacker might reach them. How it is checked Checked by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Assumption-Driven Security - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Designing defenses around assumed threats rather than a deliberate analysis of realistic attack vectors. Referenced by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) Distinct from [Security Theater](https://banes-lab.com/records/architecture/security-theater.md): Assumption-driven security defends against threats nobody analyzed, while security theater shows controls that do not reduce the real threat. How it is checked Checked by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Attribute Definitions - Kind: [artifact](https://banes-lab.com/records/kind/artifact.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Declared descriptions of the subject, resource, action, and environment attributes that an access policy evaluates. Referenced by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) How it is checked Checked by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Authenticated Principal - Kind: [model](https://banes-lab.com/records/kind/model.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The verified identity of the user or service on whose behalf a request executes, against which permissions are checked. Referenced by [Authorization](https://banes-lab.com/records/architecture/authorization.md) How it is checked Checked by [Authorization](https://banes-lab.com/records/architecture/authorization.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Authenticated-Equals-Authorized - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Conflating authentication with authorization, so any authenticated caller is granted access without a permission check. Referenced by [Authorization](https://banes-lab.com/records/architecture/authorization.md) Distinct from [Authorization Scattering](https://banes-lab.com/records/architecture/authorization-scattering.md): Authenticated-equals-authorized skips the permission check, while authorization scattering spreads the checks with no central policy. How it is checked Checked by [Authorization](https://banes-lab.com/records/architecture/authorization.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Authorization Policy - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The declared set of rules determining which principals may perform which actions on which resources. Referenced by [Access Control](https://banes-lab.com/records/architecture/access-control.md) How it is checked Checked by [Access Control](https://banes-lab.com/records/architecture/access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Automated Control - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to enforce rules automatically at runtime without manual intervention. Referenced by [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md) How it is checked Checked by [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Bounded Session Lifetime - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which a session's validity is time-limited so that access does not persist indefinitely. Referenced by [Session Management](https://banes-lab.com/records/architecture/session-management.md) How it is checked Checked by [Session Management](https://banes-lab.com/records/architecture/session-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Broad Admin Access - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Granting sweeping administrative privileges by default instead of the least access each role requires. Referenced by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) How it is checked Checked by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Certificate Management - Kind: [activity](https://banes-lab.com/records/kind/activity.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The activity of issuing, deploying, renewing, and revoking the digital certificates that transport encryption depends on. Referenced by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) How it is checked Checked by the tension resolution with encryption-in-transit Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Client Complexity - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree of additional effort a protective measure imposes on client implementations. Referenced by [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md) How it is checked Checked by the tension resolution with csrf-protection Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Coarse-Grained Permission Management - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to manage access by assigning broad, role-level permission sets rather than per-individual grants. Referenced by [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md) How it is checked Checked by [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Compromise Containment - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to keep a breach confined to one layer or segment so it cannot spread system-wide. Referenced by [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md) How it is checked Checked by [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Confidentiality - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which data is kept secret from all but authorized parties. Referenced by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) Distinct from [Integrity](https://banes-lab.com/records/lexicon/integrity.md): Confidentiality keeps data from being read, while integrity keeps it from being altered. How it is checked Checked by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Confidentiality of Stored Data - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which data held at rest remains unreadable to anyone without authorized access. Referenced by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) How it is checked Checked by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Consent/Policy - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The recorded permission and governing rules under which personal data may lawfully be collected and processed. Referenced by [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) How it is checked Checked by [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Context-Aware Authorization - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to base access decisions on the runtime context of a request, such as its attributes, its environment and the resource's state. Referenced by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) How it is checked Checked by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Context-Aware Encoding - Kind: [technique](https://banes-lab.com/records/kind/technique.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Choosing an output encoding matched to the destination context, such as HTML, an attribute, a URL or a script, so data is neutralized wherever it lands. Referenced by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) How it is checked Checked by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Continuous Authorization - Kind: [activity](https://banes-lab.com/records/kind/activity.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The practice of re-verifying a caller's authorization on every request rather than trusting a single earlier check. Referenced by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) How it is checked Checked by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Control Selection - Kind: [activity](https://banes-lab.com/records/kind/activity.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The activity of choosing which security controls to apply based on identified threats and their priority. Referenced by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) How it is checked Checked by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Controls - Kind: [mechanism](https://banes-lab.com/records/kind/mechanism.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The safeguards and countermeasures put in place to reduce security or compliance risk to an acceptable level. Referenced by [Compliance](https://banes-lab.com/records/architecture/compliance.md) How it is checked Checked by [Compliance](https://banes-lab.com/records/architecture/compliance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Data Minimization - Kind: [principle](https://banes-lab.com/records/kind/principle.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Collecting and retaining only the personal data strictly necessary for a stated purpose. Referenced by [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) How it is checked Checked by [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Data Protection - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to safeguard data against unauthorized access, loss, or disclosure throughout its lifecycle. Referenced by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) How it is checked Checked by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Defined Policy - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition An explicit, declared set of rules specifying what is permitted or denied, against which enforcement acts. Referenced by [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md) How it is checked Checked by [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Developer Ergonomics - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which a system is convenient and pleasant for developers to work with. Referenced by [Security by Design](https://banes-lab.com/records/architecture/security-by-design.md) How it is checked Checked by the tension resolution with security-by-design Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Dynamic Query Flexibility - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree of freedom to vary a query's structure at runtime, constrained when inputs must be bound as parameters. Referenced by [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md) How it is checked Checked by the tension resolution with parameterized-queries Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Ease of Initial Use - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which a system is easy to start using without upfront configuration. Referenced by [Secure by Default](https://banes-lab.com/records/architecture/secure-by-default.md) How it is checked Checked by the tension resolution with secure-by-default Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Evidence Automation - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to generate and collect compliance evidence automatically from live systems rather than assembling it by hand. Referenced by [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md) How it is checked Checked by [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Feature Exposure - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which functionality is made accessible, which broadens capability but enlarges the attack surface. Referenced by [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md) How it is checked Checked by the tension resolution with attack-surface-reduction Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Fine-Grained Access Control - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to grant or deny access at a precise level using specific attributes rather than broad roles. Referenced by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) How it is checked Checked by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Forged-Request Rejection - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to detect and reject requests that a user did not intentionally initiate. Referenced by [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md) How it is checked Checked by [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Formatting Flexibility - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree of latitude to present output in varied formats, constrained when encoding must be strict. Referenced by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) How it is checked Checked by the tension resolution with output-encoding Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Hardcoded Rules - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Embedding access rules directly in code, so changing policy requires a code change and cannot respond to runtime attributes. Referenced by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) How it is checked Checked by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Hardcoded Secrets - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Embedding credentials, keys, or tokens directly in source or configuration, exposing them to anyone who can read it. Referenced by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) Distinct from [Secret Sprawl](https://banes-lab.com/records/architecture/secret-sprawl.md): Hardcoded secrets are credentials embedded in source, while secret sprawl is credentials scattered across code, logs and configuration. How it is checked Checked by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Identity Proof - Kind: [artifact](https://banes-lab.com/records/kind/artifact.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The evidence a principal presents to establish its identity, such as a password, token, or certificate. Referenced by [Authentication](https://banes-lab.com/records/architecture/authentication.md) How it is checked Checked by [Authentication](https://banes-lab.com/records/architecture/authentication.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Identity-Aware Authorization - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to make access decisions grounded in a verified caller identity. Referenced by [Authentication](https://banes-lab.com/records/architecture/authentication.md) How it is checked Checked by [Authentication](https://banes-lab.com/records/architecture/authentication.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Immortal Client-Trusted Session - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition A session that never expires and is trusted from client-supplied state alone, so a captured token grants indefinite access. Referenced by [Session Management](https://banes-lab.com/records/architecture/session-management.md) How it is checked Checked by [Session Management](https://banes-lab.com/records/architecture/session-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Injection Prevention - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to stop untrusted input from being interpreted as executable code or commands. Referenced by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) How it is checked Checked by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Injection-Safe Data Access - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to query data such that input can never be interpreted as part of the query structure. Referenced by [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md) How it is checked Checked by [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Input Flexibility - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which a system accepts varied or loosely-structured input, in tension with strict validation. Referenced by [Input Validation](https://banes-lab.com/records/architecture/input-validation.md) How it is checked Checked by the tension resolution with input-validation Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Insecure Defaults - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Shipping default settings that favor convenience over safety, leaving a system exposed unless it is explicitly hardened. Referenced by [Secure by Default](https://banes-lab.com/records/architecture/secure-by-default.md) How it is checked Checked by [Secure by Default](https://banes-lab.com/records/architecture/secure-by-default.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Integrity - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which data is protected from unauthorized or undetected alteration. Referenced by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) How it is checked Checked by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Key Management - Kind: [activity](https://banes-lab.com/records/kind/activity.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The activity of generating, distributing, rotating, and revoking cryptographic keys across their lifecycle. Referenced by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) How it is checked Checked by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Key Operations - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree of operational burden imposed by generating, rotating, and safeguarding cryptographic keys. Referenced by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) How it is checked Checked by the tension resolution with encryption-at-rest Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Latency/Complexity - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree of added latency and complexity introduced by verifying every request rather than trusting a perimeter. Referenced by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) How it is checked Checked by the tension resolution with zero-trust-architecture Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Layered Controls - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The requirement that multiple independent safeguards protect a resource, so no single failure exposes it. Referenced by [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md) How it is checked Checked by [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Machine-Readable Policies - Kind: [artifact](https://banes-lab.com/records/kind/artifact.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Security or compliance policies expressed in a structured, executable format that tools can evaluate directly. Referenced by [Policy as Code](https://banes-lab.com/records/architecture/policy-as-code.md) How it is checked Checked by [Policy as Code](https://banes-lab.com/records/architecture/policy-as-code.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Manual-Only Review - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Relying solely on human review to catch policy violations, which neither scales nor reliably covers every case. Referenced by [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md) How it is checked Checked by [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Minimal Exposure - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The condition of exposing only the endpoints, ports, and capabilities strictly required. Referenced by [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md) How it is checked Checked by [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Minimal Permissions - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The requirement that each principal hold only the permissions its function needs. Referenced by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) How it is checked Checked by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Mitigation - Kind: [activity](https://banes-lab.com/records/kind/activity.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The activity of reducing a risk's likelihood or impact through deliberate countermeasures. Referenced by [Risk Management](https://banes-lab.com/records/architecture/risk-management.md) How it is checked Checked by [Risk Management](https://banes-lab.com/records/architecture/risk-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Ongoing Assurance - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to demonstrate continuously that controls remain effective, rather than only at audit time. Referenced by [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md) How it is checked Checked by [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Operational Convenience - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which broad access makes day-to-day operations easier, in tension with least privilege. Referenced by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) How it is checked Checked by the tension resolution with least-privilege Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Perimeterless Security - Kind: [approach](https://banes-lab.com/records/kind/approach.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition A security model that trusts no network location implicitly and verifies every request regardless of origin. Referenced by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) How it is checked Checked by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Pipeline Complexity - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree of intricacy added to a delivery pipeline by embedding continuous checks within it. Referenced by [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md) How it is checked Checked by the tension resolution with continuous-compliance Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Plaintext Sensitive Storage - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Storing sensitive data unencrypted at rest, exposing it to anyone who reaches the underlying storage. Referenced by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) How it is checked Checked by [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Plaintext Transport - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Sending data over an unencrypted channel, exposing it to interception and tampering in transit. Referenced by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) How it is checked Checked by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Point-in-Time Audit Only - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Verifying compliance only at isolated audit moments, leaving the intervals between checks unmonitored for drift. Referenced by [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md) How it is checked Checked by [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Policy Engine - Kind: [mechanism](https://banes-lab.com/records/kind/mechanism.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition A runtime component that evaluates access requests against declared policies and returns permit or deny decisions. Referenced by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) How it is checked Checked by [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Policy Maintenance - Kind: [activity](https://banes-lab.com/records/kind/activity.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The activity of keeping codified policies correct and current as requirements evolve. Referenced by [Policy as Code](https://banes-lab.com/records/architecture/policy-as-code.md) How it is checked Checked by the tension resolution with policy-as-code Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Priority-Based Controls - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to apply controls in order of risk priority, addressing the greatest exposure first. Referenced by [Risk Management](https://banes-lab.com/records/architecture/risk-management.md) How it is checked Checked by [Risk Management](https://banes-lab.com/records/architecture/risk-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Privacy Compliance - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which a system meets the privacy obligations imposed by law and policy. Referenced by [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) How it is checked Checked by [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Proactive Risk Reduction - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to reduce risk by designing safeguards in from the start rather than patching flaws later. Referenced by [Security by Design](https://banes-lab.com/records/architecture/security-by-design.md) How it is checked Checked by [Security by Design](https://banes-lab.com/records/architecture/security-by-design.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Query Parameter Binding - Kind: [technique](https://banes-lab.com/records/kind/technique.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Passing query values as bound parameters separate from the query text, so input can never alter the query structure. Referenced by [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md) How it is checked Checked by [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Raw Output Rendering - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Emitting untrusted data into output without encoding it for its context, enabling injection attacks such as cross-site scripting. Referenced by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) How it is checked Checked by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Reduced Blast Radius - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which the impact of a compromise is confined to a limited scope. Referenced by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) How it is checked Checked by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Reduced Exploitability - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which fewer exposed features leave a system harder to exploit. Referenced by [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md) How it is checked Checked by [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Reduced Misconfiguration Risk - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which safe defaults lower the chance of an insecure configuration. Referenced by [Secure by Default](https://banes-lab.com/records/architecture/secure-by-default.md) How it is checked Checked by [Secure by Default](https://banes-lab.com/records/architecture/secure-by-default.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Regulatory Alignment - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which a system conforms to the laws and regulations that govern it. Referenced by [Compliance](https://banes-lab.com/records/architecture/compliance.md) How it is checked Checked by [Compliance](https://banes-lab.com/records/architecture/compliance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Request Origin Verification - Kind: [technique](https://banes-lab.com/records/kind/technique.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Confirming that a state-changing request originates from a trusted client, typically via a token or origin check. Referenced by [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md) How it is checked Checked by [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Resource Protection - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to ensure that only permitted operations reach a protected resource. Referenced by [Access Control](https://banes-lab.com/records/architecture/access-control.md) How it is checked Checked by [Access Control](https://banes-lab.com/records/architecture/access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Review - Kind: [activity](https://banes-lab.com/records/kind/activity.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The activity of examining a change or artifact against standards before it is accepted. Referenced by [Governance](https://banes-lab.com/records/architecture/governance.md) How it is checked Checked by [Governance](https://banes-lab.com/records/architecture/governance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Revocable Access - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to withdraw a principal's access immediately when a session or grant is terminated. Referenced by [Session Management](https://banes-lab.com/records/architecture/session-management.md) How it is checked Checked by [Session Management](https://banes-lab.com/records/architecture/session-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Risk Identification - Kind: [activity](https://banes-lab.com/records/kind/activity.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The activity of discovering and cataloguing the risks that could affect a system or objective. Referenced by [Risk Management](https://banes-lab.com/records/architecture/risk-management.md) Distinct from [Mitigation](https://banes-lab.com/records/lexicon/mitigation.md): Risk identification finds the risks, while mitigation reduces them. How it is checked Checked by [Risk Management](https://banes-lab.com/records/architecture/risk-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Role Definitions - Kind: [artifact](https://banes-lab.com/records/kind/artifact.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Declared sets of permissions grouped into named roles that are assigned to principals. Referenced by [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md) How it is checked Checked by [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Role Explosion - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which roles proliferate into many narrow definitions as access requirements grow. Referenced by [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md) How it is checked Checked by the tension resolution with role-based-access-control Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Rotation Policy - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The specified interval and procedure by which secrets or keys must be replaced to limit the value of any single compromise. Referenced by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) How it is checked Checked by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Safe Credential Handling - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to store, transmit, and use credentials without exposing them. Referenced by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) How it is checked Checked by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Safe Rendering - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to display untrusted data without allowing it to execute as markup or script. Referenced by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) How it is checked Checked by [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Secret Store - Kind: [artifact](https://banes-lab.com/records/kind/artifact.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition A dedicated, access-controlled repository that holds credentials and keys outside of application code. Referenced by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) How it is checked Checked by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Secure Communication - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ability to exchange data over a channel protected from interception and tampering. Referenced by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) How it is checked Checked by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Secure Configuration - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which a system's settings and secrets are arranged to minimize exposure. Referenced by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) How it is checked Checked by [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Security as Afterthought - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Deferring security concerns until late in development, when vulnerabilities are costly and difficult to remediate. Referenced by [Security by Design](https://banes-lab.com/records/architecture/security-by-design.md) How it is checked Checked by [Security by Design](https://banes-lab.com/records/architecture/security-by-design.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Single Control Reliance - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Depending on one security control with no layered defenses, so a single bypass compromises the whole system. Referenced by [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md) How it is checked Checked by [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Speed - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which delivery proceeds rapidly, in tension with the caution that managing risk requires. Referenced by [Risk Management](https://banes-lab.com/records/architecture/risk-management.md) How it is checked Checked by the tension resolution with risk-management Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### String-Concatenated SQL - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Assembling SQL queries by concatenating untrusted input into strings, opening the system to SQL injection. Referenced by [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md) How it is checked Checked by [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Strong Identity - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The requirement that every actor prove a strong, verified identity before any access is granted. Referenced by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) How it is checked Checked by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Team Velocity - Kind: [metric](https://banes-lab.com/records/kind/metric.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The rate at which a team delivers completed work, which governance overhead can slow. Referenced by [Governance](https://banes-lab.com/records/architecture/governance.md) How it is checked Checked by the tension resolution with governance Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Threat Scenarios - Kind: [artifact](https://banes-lab.com/records/kind/artifact.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Concrete descriptions of how an attacker might attempt to compromise a system, enumerated during threat modeling. Referenced by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) How it is checked Checked by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### TLS/mTLS - Kind: [mechanism](https://banes-lab.com/records/kind/mechanism.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Transport-layer protocols that encrypt a connection and, with mutual TLS, mutually authenticate both endpoints. Referenced by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) How it is checked Checked by [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Trust Boundaries - Kind: [model](https://banes-lab.com/records/kind/model.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The demarcations in a system where the level of trust changes and data crossing them must be validated. Referenced by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) How it is checked Checked by [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Trusted Internal Network Assumption - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Assuming that traffic originating inside the network perimeter is inherently trustworthy, ignoring insider and lateral-movement threats. Referenced by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) How it is checked Checked by [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Trusting External Input - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Accepting external input as well-formed and safe without validating it, exposing the system to malformed or malicious data. Referenced by [Input Validation](https://banes-lab.com/records/architecture/input-validation.md) How it is checked Checked by [Input Validation](https://banes-lab.com/records/architecture/input-validation.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Unbounded Autonomy - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Allowing an actor or component to act without governance limits, so unsafe or unauthorized actions go unchecked. Referenced by [Governance](https://banes-lab.com/records/architecture/governance.md) How it is checked Checked by [Governance](https://banes-lab.com/records/architecture/governance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Uncontrolled Change - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Permitting changes to a controlled system without review, approval, or record, undermining compliance and traceability. Referenced by [Compliance](https://banes-lab.com/records/architecture/compliance.md) How it is checked Checked by [Compliance](https://banes-lab.com/records/architecture/compliance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Unnecessary Public Surface - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Exposing more endpoints, ports, or interfaces publicly than the function requires, enlarging the attack surface. Referenced by [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md) How it is checked Checked by [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Unrestricted Access - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Permitting access to a resource with no controls, so any caller can invoke any operation. Referenced by [Access Control](https://banes-lab.com/records/architecture/access-control.md) How it is checked Checked by [Access Control](https://banes-lab.com/records/architecture/access-control.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Usability - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The ease with which users can accomplish their goals with a system. Referenced by [Access Control](https://banes-lab.com/records/architecture/access-control.md) How it is checked Checked by the tension resolution with access-control Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### User Convenience - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition The degree to which a system minimizes friction and effort for its users. Referenced by [Session Management](https://banes-lab.com/records/architecture/session-management.md) How it is checked Checked by the tension resolution with session-management Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Validation Rules - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition Declared constraints that input must satisfy, such as type, range, format and length, before it is accepted. Referenced by [Input Validation](https://banes-lab.com/records/architecture/input-validation.md) How it is checked Checked by [Input Validation](https://banes-lab.com/records/architecture/input-validation.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Zero Trust - Kind: [approach](https://banes-lab.com/records/kind/approach.md) - Category: [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) - Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md) Details Definition A security stance that grants no implicit trust and continuously verifies every access request regardless of its source. Referenced by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) How it is checked Checked by [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ## Links to - [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - [Security Core](https://banes-lab.com/records/layer/security-core.md) - [RBAC](https://banes-lab.com/records/architecture/role-based-access-control.md) - [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md) - [capability](https://banes-lab.com/records/kind/capability.md) - [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) - [Authentication](https://banes-lab.com/records/architecture/authentication.md) - [artifact](https://banes-lab.com/records/kind/artifact.md) - [Threat Modeling](https://banes-lab.com/records/architecture/threat-modeling.md) - [Threat Scenarios](https://banes-lab.com/records/lexicon/threat-scenarios.md) - [Security Theater](https://banes-lab.com/records/architecture/security-theater.md) - [ABAC](https://banes-lab.com/records/architecture/attribute-based-access-control.md) - [model](https://banes-lab.com/records/kind/model.md) - [Authorization](https://banes-lab.com/records/architecture/authorization.md) - [Authorization Scattering](https://banes-lab.com/records/architecture/authorization-scattering.md) - [constraint](https://banes-lab.com/records/kind/constraint.md) - [Access Control](https://banes-lab.com/records/architecture/access-control.md) - [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md) - [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - [Session Management](https://banes-lab.com/records/architecture/session-management.md) - [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md) - [activity](https://banes-lab.com/records/kind/activity.md) - [Encryption in Transit](https://banes-lab.com/records/architecture/encryption-in-transit.md) - [Defense in Depth](https://banes-lab.com/records/architecture/defense-in-depth.md) - [Integrity](https://banes-lab.com/records/lexicon/integrity.md) - [Encryption at Rest](https://banes-lab.com/records/architecture/encryption-at-rest.md) - [technique](https://banes-lab.com/records/kind/technique.md) - [Output Encoding](https://banes-lab.com/records/architecture/output-encoding.md) - [Zero Trust Architecture](https://banes-lab.com/records/architecture/zero-trust-architecture.md) - [mechanism](https://banes-lab.com/records/kind/mechanism.md) - [Compliance](https://banes-lab.com/records/architecture/compliance.md) - [principle](https://banes-lab.com/records/kind/principle.md) - [Security by Design](https://banes-lab.com/records/architecture/security-by-design.md) - [Parameterized Queries](https://banes-lab.com/records/architecture/parameterized-queries.md) - [Secure by Default](https://banes-lab.com/records/architecture/secure-by-default.md) - [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md) - [Attack Surface Reduction](https://banes-lab.com/records/architecture/attack-surface-reduction.md) - [Secrets Management](https://banes-lab.com/records/architecture/secrets-management.md) - [Secret Sprawl](https://banes-lab.com/records/architecture/secret-sprawl.md) - [Input Validation](https://banes-lab.com/records/architecture/input-validation.md) - [Policy as Code](https://banes-lab.com/records/architecture/policy-as-code.md) - [Risk Management](https://banes-lab.com/records/architecture/risk-management.md) - [approach](https://banes-lab.com/records/kind/approach.md) - [Governance](https://banes-lab.com/records/architecture/governance.md) - [Mitigation](https://banes-lab.com/records/lexicon/mitigation.md) - [metric](https://banes-lab.com/records/kind/metric.md) ## Linked from - [The layer topology](https://banes-lab.com/ontology/schema/the-layer-topology.md) - [The membership](https://banes-lab.com/ontology/schema/the-membership.md)