# Security Core

> The rules governing security posture — no hardcoded secrets, validated input, least privilege, no insecure fallbacks.

Record: `algo:security-core`
Kind: Architectural Clusters
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/algorithms#algo-security-core
Closure: https://banes-lab.com/json/records/algo/security-core/closure

## composed-by

- [Secret Store Over Hardcoded Secrets](https://banes-lab.com/records/algo/no-hardcoded-secrets.md)
- [Boundary Validation Over Unvalidated Input](https://banes-lab.com/records/algo/no-unvalidated-input.md)
- [Least Privilege Over Broad Privilege](https://banes-lab.com/records/algo/no-broad-privilege.md)
- [Config Externalization Over Env Fallback](https://banes-lab.com/records/algo/no-env-fallback.md)