# security-canon

Orthogonal vocabulary and canonical model for security-related concepts.

SecurityCanon extends InfoTechCanon with a focused security domain model, in the
same architectural role that [CommerceCanon](../commerce-canon) holds for
commercial terminology and [InterfaceCanon](../interface-canon) for interface
terminology. Its initial content is the IT-security material extracted from
InfoTechCanon: the security, access control, and DevSecOps models, the CARING
access governance standard, and the CARING Kubernetes RBAC benchmark.

| | |
| --- | --- |
| **Flavor** | project |
| **Domain** | infotech |
| **Workplan prefix** | `SECURITY-WP-` |
| **Upstream canon** | [InfoTechCanon](../info-tech-canon) |

Start with [INTENT.md](INTENT.md) and [SCOPE.md](SCOPE.md).
Agent instructions are in [AGENTS.md](AGENTS.md); active work is in
[workplans/](workplans/).

## Status

Bootstrap. The repository is registered and governed, but holds no migrated
canon content yet. See [SECURITY-WP-0001](workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md).