Policy Enforcement / False Positives

Kind: tension

Record: tension:false-positives-policy-enforcement

Canonical: Schema

"policy-enforcement" (security-core layer) is traded against "False Positives" (structural-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "False Positives" and choosing an explicit operating point.

Listed in Tensions, after Governance / Team Velocity and before Policy as Code / Policy Maintenance.

In tension with

• Policy Enforcement
• False Positives

Mechanism

• irreducible-tradeoff

Linked from

• Security / Privacy / Compliance / Governance
• Resolution mechanisms