# Least Privilege Over Broad Privilege

> Narrow a broad capability to the minimal typed interface a task needs, shrinking the blast radius.

Record: `algorithms:no-broad-privilege`
Kind: algorithm
Canonical: https://banes-lab.com/ontology/algorithms#algorithms-no-broad-privilege
Closure: https://banes-lab.com/json/records/algorithms/no-broad-privilege/closure

Listed in [Algorithm contracts](https://banes-lab.com/api/records/algorithms.md), after [Boundary Validation Over Unvalidated Input](https://banes-lab.com/records/algorithms/no-unvalidated-input.md) and before [Config Externalization Over Env Fallback](https://banes-lab.com/records/algorithms/no-env-fallback.md).

## Domain

- [Architectural Rules](https://banes-lab.com/records/algorithms-domain/architectural-rules.md)

## Tier

- [leaf](https://banes-lab.com/records/vocabulary/domain-tier-leaf.md)

## Principle

- [Least Privilege](https://banes-lab.com/records/architecture/least-privilege.md)

## Composes

- [Security Core](https://banes-lab.com/records/algorithms/security-core.md)
- [Coupling Control](https://banes-lab.com/records/algorithms/coupling-control.md)

## Math type

- [Logic](https://banes-lab.com/records/reasoning/math-type-logic.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)
- [Architecture](https://banes-lab.com/ontology/algorithms/algorithms-domain-architecture.md)
- [Architectural Clusters](https://banes-lab.com/ontology/algorithms/algorithms-domain-architectural-clusters.md)
- [The mathematics](https://banes-lab.com/ontology/reasoning/the-mathematics.md)
- [Domain tiers](https://banes-lab.com/ontology/schema/the-vocabulary-domain-tier.md)