Skip to content

stevenacoffman/security

v0.1.0MIT

Security design: least privilege, multi-party authorization, zero trust, supply chain, and breakglass.

multi-party-authorization

Use when designing controls for high-risk operations one insider could abuse or botch: production access elevation, secret rotation, mass delete or send, emergency database maintenance, review bypass. Treat code review gates as MPA. Not for low-risk routine work.

Read SKILL.md at the source

Pinned to revision e4081cbb4d29, so it is the text this page describes rather than whatever the author pushed since.

Files

Every link opens the file at its source, pinned to the revision this page describes.