Documentation

SECURITY â€¢ v2.0.78

# Security Guide

Security operating model for AI-generated code with anti-pattern defense and scan discipline.

SECURITY Context Profile
53 Core agents
61 Claude skills
64 Copilot agents
60 Cursor rules
60 Codex skills
61 Gemini skills

## Best For

Best for features touching auth, input handling, secrets, compliance, or external exposure.

- Threat model before implementation
- Use anti-pattern references while coding
- Run scanner and review before merge

## Anti-Patterns To Avoid

These behaviors reduce framework signal and increase rework risk.

- Security treated as post-merge task
- Hardcoded secrets or weak defaults
- No remediation plan for findings

## Adoption Plan

1. Map risk areas in PRD
2. Implement with secure defaults
3. Run security scans and tests
4. Document mitigations and residual risk

/security audit /security-scanner /review /anvil

## Primary References

- Anti Patterns Breadth
- Anti Patterns Depth
- Security MCP

## Operational Checklist

- Version alignment confirmed (v2.0.78)
- Execution evidence captured in stories or PR
- Gate validations completed before merge/deploy

Open Repository Back to Home