Technical Security Posture 🔐🛡️

"Security is not a feature; it is an invariant. Assume the boundary has already been breached."

This addon is triggered for any task involving Authentication, Authorization (RBAC/ABAC), Entitlements, PII handling, or Audit Logging.

When to use

Load this skill when:

• You are implementing or modifying Auth/AuthZ logic.
• The task involves handling sensitive data (emails, keys, billing).
• You are designing internal service-to-service communication.
• The work involves logging, error handling, or external callbacks.
• You are auditing a codebase for vulnerabilities.

Operating Rules (R1–R5)

R1 - Zero-Trust Internals (V9, S25)