Encryption at Rest / Key Operations
Kind: tension
Record: tension:encryption-at-rest-key-operations
Canonical: Schema
"encryption-at-rest" (security-core layer) is traded against "Key Operations" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Key Operations" and choosing an explicit operating point.
Listed in Tensions, after Output Encoding / Formatting Flexibility and before Encryption in Transit / Certificate Management.