Defense in Depth / Complexity

Kind: tension

Record: tension:complexity-defense-in-depth

Canonical: Schema

"defense-in-depth" (security-core layer) is traded against "Complexity" (human-factors layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Complexity" and choosing an explicit operating point.

Listed in Tensions, after Security by Design / Developer Ergonomics and before Least Privilege / Operational Convenience.

In tension with

Mechanism

Linked from