Security Is a Property, Not a Feature
Incoming References
Case Study 3
- AISDR (AI Security Decision Record)case-aisdr
- CapBancase-capban
- CapDBcase-capdb
Pattern 11
- Connector Firewallpattern-connector-firewall
- Descriptor-Bound Approvalpattern-descriptor-bound-approval
- Enforcement over Verificationpattern-enforcement-over-verification
- Evidence Eligibility Gatepattern-evidence-eligibility-gate
- Feature Implication Build Gatepattern-feature-implication-build-gate
- Idempotent Recovery Looppattern-idempotent-recovery-loop
- Module Registry with Kill Switchespattern-module-registry-kill-switches
- Proven Core Extension Boundarypattern-proven-core-extension-boundary
- Risk-Calibrated Action Gatepattern-risk-calibrated-action-gate
- Single-Writer Generation Fencepattern-single-writer-generation-fence
- Temporal Prompt Security Windowpattern-temporal-prompt-security-window
Projection 7
- Bstmbstm
- Talk 0002 No Ai Action Without A Recordtalk-0002-no-ai-action-without-a-record
- Talk 0002 No Ai Action Without A Record Notestalk-0002-no-ai-action-without-a-record-notes
- Talk 0002 No Ai Action Without A Record Slidestalk-0002-no-ai-action-without-a-record-slides
- Talk 0004 Systems In The Smalltalk-0004-systems-in-the-small
- Talk 0004 Systems In The Small Notestalk-0004-systems-in-the-small-notes
- Talk 0004 Systems In The Small Slidestalk-0004-systems-in-the-small-slides
Outgoing References
Case Study 3
- AISDR (AI Security Decision Record)case-aisdr
- CapBancase-capban
- CapDBcase-capdb
Concept 18
- Admission Decisionconcept-admission-decision
- Approval Gateconcept-approval-gate
- Compromised Credential Ruleconcept-compromised-credential-rule
- Confine the Dangerousconcept-confine-the-dangerous
- Destructive Execution Boundaryconcept-destructive-execution-boundary
- Fail Closedconcept-fail-closed
- Governed Fallback Pathconcept-governed-fallback-path
- Least Privilegeconcept-least-privilege
- Operational State Boundaryconcept-operational-state-boundary
- Pre-Model Safety Boundaryconcept-pre-model-safety-boundary
- Private Control Surfaceconcept-private-control-surface
- Regeneration Pathconcept-regeneration-path
- Revocation Ruleconcept-revocation-rule
- Secure Fetch Boundaryconcept-secure-fetch-boundary
- Sensitivity Labelconcept-sensitivity-label
- Signed Artifact Gateconcept-signed-artifact-gate
- Trust Rootconcept-trust-root
- Unsigned Artifact Policyconcept-unsigned-artifact-policy
Diagram 1
- Capban Pipelinediagram-capban-pipeline
Law 1
- Architecture Is Constraint Managementlaw-02-architecture-is-constraint-management
Reference 2
- NIST SP 800-207 and the zero-trust literatureref-zero-trust
- Saltzer & Schroeder (1975) — The Protection of Information in Computer Systemsref-saltzer-schroeder