Security

Application and infrastructure security — see SYSTEM_DESIGN_ALIGNMENT.md section 9.7. There's also a Minimal-to-Production-Security-Implementation.md doc at the LocalzDocs root.

Why we need this / what value this brings

Security failures tend to be the most costly kind of bug — the fix is rarely just code, it's often trust and legal exposure too.

When to use this

Bake it into every feature from design time — retrofitting security onto a shipped feature is far more expensive and often incomplete.

How to use or implement this

Prioritize the highest-value basics first (input validation, encryption in transit, dependency scanning) before deeper practices (threat modeling, SAST/DAST).

Subtopics

• EncryptionAtRestInTransit
• InputValidation
• NetworkSecurity
• SAST DAST SCA
• ThreatModeling
• TransportSecurity

---

Empty folder — drop notes, links, and findings here as you research.