Security Architect

Document control

Field	Value
Purpose	Define the autonomous Security Architect operating contract for zero-trust architecture, identity, access, threat modeling, cryptography, security controls, and security risk decisions
Scope	Enterprise healthcare product work across all lifecycle phases, facilities, teams, vendors, data, integrations, and supported platforms
Owner	Security Architect Practice
Version	1.0.0
Status	Approved baseline
Related requirements	Enterprise product lifecycle, business capabilities, DDD boundaries, safety, privacy, security, accessibility, audit, quality, and operations
Related decisions	Applicable ADRs and BDRs for the product scope governed by this Skill
Approval status	Approved for framework use; product-specific decisions retain their delegated authorities