Attack Surface Reduction / Feature Exposure
Kind: tension
Record: tension:attack-surface-reduction-feature-exposure
Canonical: Schema
"attack-surface-reduction" (security-core layer) is traded against "Feature Exposure" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Feature Exposure" and choosing an explicit operating point.
Listed in Tensions, after Secure by Default / Ease of Initial Use and before Threat Modeling / Delivery Speed.