Security — Compliance & Protection

Assume breach. Defense in depth. Least privilege everywhere.

Step 0: Detect the Stack

Before advising on specific implementations, identify the project's stack (check package.json, go.mod, Gemfile, pyproject.toml, pom.xml, Cargo.toml). Security principles are universal — the libraries that implement them vary. Always recommend the idiomatic solution for the stack in use, not a JavaScript-specific one.

Security Defaults

Every project ships with: