# Deny-by-Default Behavior

> The ability to default to denying access when a security check cannot complete.

Record: `lex:deny-by-default-behavior`
Kind: capability
Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lex-deny-by-default-behavior

## category

- [Error Handling / Resilience](https://banes-lab.com/records/lex-category/error-handling-resilience.md)

## referenced-by

- [Fail Secure](https://banes-lab.com/records/arch/fail-secure.md)