Security
7 clusters, spanning half-life layers 0–3: Application security, Identity & access, Cryptography basics, Security tooling, DevSecOps & supply chain, Compliance & privacy, Network security.
Clusters
Section titled “Clusters”Application security
The trust-boundary model — where untrusted input crosses into a privileged context — transfers to every language, every framework, and to LLM prompt…
Identity & access
Authorisation modelling transfers to every system that has users. Ties directly to
apis-and-integration/auth-and-identity.Cryptography basics
Layer 0 and permanent. What each primitive guarantees and what it does not is the content; algorithm names are lookup.
Security tooling
The SAST/DAST/SCA distinction and triage discipline transfer. Rule syntaxes and dashboards do not.
DevSecOps & supply chain
Provenance and the dependency-confusion threat model are durable and increasingly load-bearing. Standards are still moving.
Compliance & privacy
Control mapping and evidence collection transfer across every framework. The frameworks themselves overlap heavily and the second audit is far…
Network security
Segmentation and the defence-in-depth argument transfer to every cloud’s security groups and to every on-prem network.