Policy as Code / Policy Maintenance
Kind: tension
Record: tension:policy-as-code-policy-maintenance
Canonical: Schema
"policy-as-code" (security-core layer) is traded against "Policy Maintenance" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Policy Maintenance" and choosing an explicit operating point.
Listed in Tensions, after Policy Enforcement / False Positives and before Risk Management / Speed.