defense-in-depth

SKILL.md

Defense in depth applies multiple security layers so that if one fails, others still protect the system. For AI applications, this means validating at every boundary: edge, gateway, input, authorization, data, LLM, output, and observability.

Core Principle: No single security control should be the only thing protecting sensitive operations.

| Defense in Depth | NIST | Multiple validation layers | | Zero Trust | Google BeyondCorp | Every request verified | | Least Privilege | AWS IAM | Minimal permissions | | Complete Mediation | Saltzer & Schroeder | Every access checked |

Use when building secure AI pipelines or hardening LLM integrations. Defense-in-depth implements 8 validation layers from edge to storage with no single point of failure. Source: yonatangross/orchestkit.

View raw