deny-by-default

Type: rule

Intent

Every resource type is denied until the platform has security controls and observability wired. Approval is the platform's commitment, not a task left to the application team.

← Back to all decisions