🛡️ Secure Development Lifecycle (SDLC) Skill

🔴 AI FIRST Quality Principle

Apply the AI FIRST principle: never accept first-pass quality. Minimum 2 iterations. Read all output, improve every section. No shortcuts.

🎯 Purpose

Comprehensive security practices for the entire Software Development Lifecycle (SDLC), ensuring security is built in from inception through maintenance. Integrates classification-driven requirements, AI-augmented development controls, and systematic testing frameworks aligned with Hack23 Secure Development Policy.

🔗 Governance chain

Authority flows from the Information Security Policy (master ISMS document) → Secure Development Policy (SDLC requirements) → this skill (operational implementation in this repository).

Directly relevant companion policies:

• Open Source Policy — every dependency introduced during SDLC must be licence-cleared and tracked in SBOM
• AI Policy — Copilot and agent-generated code require human review and DCO sign-off
• Threat Modeling · Vulnerability Management · Change Management · Access Control · Cryptography · Incident Response · Security Metrics · CLASSIFICATION