Security Patterns

Comprehensive security patterns for building hardened applications. Each category has individual rule files in rules/ loaded on-demand.

Quick Reference

Category	Rules	Impact	When to Use
Authentication	upstream	CRITICAL	JWT tokens, OAuth 2.1/PKCE, RBAC/permissions
Defense-in-Depth	1	CRITICAL	Multi-layer security, zero-trust architecture
Input Validation	2	HIGH	Schema validation (Zod/Pydantic), output encoding, file uploads
OWASP Top 10	1	CRITICAL	Injection prevention, broken authentication fixes
LLM Safety	refs	HIGH	Prompt injection defense, output guardrails, content filtering
PII Masking	refs	HIGH	PII detection/redaction with Presidio, Langfuse, LLM Guard
Scanning	upstream	HIGH	Dependency audit, SAST (Semgrep/Bandit), secret detection
Advanced Guardrails	2	CRITICAL	NeMo/Guardrails AI validators, red-teaming, OWASP LLM