# Deny-by-Default Behavior

> The ability to default to denying access when a security check cannot complete.

Record: `lexicon:deny-by-default-behavior`
Kind: capability
Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-deny-by-default-behavior

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Controlled Failure](https://banes-lab.com/records/lexicon/controlled-failure.md) and before [Early Defect Detection](https://banes-lab.com/records/lexicon/early-defect-detection.md).

## Category

- [Error Handling / Resilience](https://banes-lab.com/records/lexicon-category/error-handling-resilience.md)

## Enabled by

- [Fail Secure](https://banes-lab.com/records/architecture/fail-secure.md)

## Linked from

- [Error Handling / Resilience](https://banes-lab.com/ontology/principles/architecture-category-error-handling-resilience.md)