Least Privilege Over Broad Privilege

Kind: algorithm

Record: algorithms:no-broad-privilege

Canonical: Algorithms

Closure: Dependencies in load order

Narrow a broad capability to the minimal typed interface a task needs, shrinking the blast radius.

Listed in Algorithm contracts, after Boundary Validation Over Unvalidated Input and before Config Externalization Over Env Fallback.

Domain

• Architectural Rules

Tier

• leaf

Principle

• Least Privilege

Composes

• Security Core
• Coupling Control

Math type

• Logic

Linked from

• Security / Privacy / Compliance / Governance
• Architecture
• Architectural Clusters
• The mathematics
• Domain tiers