Skip to content

stevenacoffman/security

v0.1.0MIT

Security design: least privilege, multi-party authorization, zero trust, supply chain, and breakglass.

fail-safe-vs-fail-secure

Use when designing a component that loads ACLs, certificates, or policies at runtime and must decide what happens when that load fails: fail open (fail-safe, availability) or fail closed (fail-secure, confidentiality). Not for debugging an existing failure.

Read SKILL.md at the source

Pinned to revision e4081cbb4d29, so it is the text this page describes rather than whatever the author pushed since.

Files

Every link opens the file at its source, pinned to the revision this page describes.