# Security Theater

Record: `arch:security-theater`
Kind: anti-pattern
Layer: [Enforcement Core](https://banes-lab.com/records/layer/enforcement-core.md)
Severity: discouraged
Scope: security_governance, model_governance
Canonical: https://banes-lab.com/ontology#arch-security-theater

## Repair

- Refactored by: threat_model, server_side_enforcement, penetration_test, [policy_as_code](https://banes-lab.com/records/arch/policy-as-code.md)
- Detected by: control_not_linked_to_threat, bypass_endpoint, client_only_security, audit_passes_but_attack_succeeds
- Violated by: Add visible security controls that do not reduce the actual threat model or can be bypassed by alternate paths.

## referenced-by

- [Threat Modeling](https://banes-lab.com/records/arch/threat-modeling.md)