2026-09-20 18:13:56 +00:00
|
|
|
# security-canon
|
|
|
|
|
|
2026-09-20 20:32:05 +02:00
|
|
|
Orthogonal vocabulary and canonical model for security-related concepts.
|
|
|
|
|
|
|
|
|
|
SecurityCanon extends InfoTechCanon with a focused security domain model, in the
|
|
|
|
|
same architectural role that [CommerceCanon](../commerce-canon) holds for
|
|
|
|
|
commercial terminology and [InterfaceCanon](../interface-canon) for interface
|
|
|
|
|
terminology. Its initial content is the IT-security material extracted from
|
|
|
|
|
InfoTechCanon: the security, access control, and DevSecOps models, the CARING
|
|
|
|
|
access governance standard, and the CARING Kubernetes RBAC benchmark.
|
|
|
|
|
|
|
|
|
|
| | |
|
|
|
|
|
| --- | --- |
|
|
|
|
|
| **Flavor** | project |
|
|
|
|
|
| **Domain** | infotech |
|
|
|
|
|
| **Workplan prefix** | `SECURITY-WP-` |
|
|
|
|
|
| **Upstream canon** | [InfoTechCanon](../info-tech-canon) |
|
|
|
|
|
|
2026-09-20 20:33:56 +02:00
|
|
|
Start with [INTENT.md](INTENT.md) and [SCOPE.md](SCOPE.md).
|
2026-09-20 20:32:05 +02:00
|
|
|
Agent instructions are in [AGENTS.md](AGENTS.md); active work is in
|
|
|
|
|
[workplans/](workplans/).
|
|
|
|
|
|
|
|
|
|
## Status
|
|
|
|
|
|
|
|
|
|
Bootstrap. The repository is registered and governed, but holds no migrated
|
|
|
|
|
canon content yet. See [SECURITY-WP-0001](workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md).
|
