# ABAC / Policy Complexity

> "attribute-based-access-control" (security-core layer) is traded against "Policy Complexity" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Policy Complexity" and choosing an explicit operating point.

Record: `tension:abac-policy-complexity`
Kind: tension
Canonical: https://banes-lab.com/ontology/schema#tension-abac-policy-complexity

## tensions-with

- [ABAC](https://banes-lab.com/records/arch/attribute-based-access-control.md)
- [Policy Complexity](https://banes-lab.com/records/lex/policy-complexity.md)