🎨 style(markdown): format all markdown files with prettier
- 使用 prettier 格式化所有 markdown 文件 - prose-wrap: always, print-width: 80 - 保持代码块和表格格式 - 提升可读性和一致性 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
@@ -1,6 +1,9 @@
|
||||
---
|
||||
name: defense-in-depth
|
||||
description: "Defense in depth: add layered validation/guardrails across a data path (auth, validation, invariants, rate limits, idempotency). Triggers: defense in depth, guardrails, harden, 分层校验, 多道防线, 安全加固."
|
||||
description:
|
||||
"Defense in depth: add layered validation/guardrails across a data path (auth,
|
||||
validation, invariants, rate limits, idempotency). Triggers: defense in depth,
|
||||
guardrails, harden, 分层校验, 多道防线, 安全加固."
|
||||
---
|
||||
|
||||
# Defense in Depth(分层校验 / 多道防线)
|
||||
@@ -22,12 +25,10 @@ description: "Defense in depth: add layered validation/guardrails across a data
|
||||
## Procedure(default)
|
||||
|
||||
1. **Map the Path**
|
||||
|
||||
- Identify trust boundaries and validation points
|
||||
- List invariants that must always hold
|
||||
|
||||
2. **Layer Guardrails**
|
||||
|
||||
- AuthN/AuthZ checks at boundaries (least privilege)
|
||||
- Input validation + normalization (reject early)
|
||||
- Business invariants (defensive checks with clear errors)
|
||||
@@ -36,7 +37,6 @@ description: "Defense in depth: add layered validation/guardrails across a data
|
||||
- Observability (structured logs, metrics, alerts)
|
||||
|
||||
3. **Failure Modes**
|
||||
|
||||
- Define what happens on invalid input, partial failures, timeouts
|
||||
- Ensure errors are actionable and do not leak sensitive info
|
||||
|
||||
|
||||
Reference in New Issue
Block a user