质量与评审
error-budget-security
更新于 2026-09-19
Error Budget · 安全规则
Security rules for Error Budget: boundary validation, server-side authorisation and zero secret leakage.
- 技术栈
- Error Budget
- 主题
- 安全
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Validate and normalise every input at the boundary it enters the system
- ✓ Authorise on the server against the authenticated principal, never on client claims
- ✓ Keep secrets out of repositories, logs and error messages
✕ 常见反模式
- ✕ Trusting headers or parameters that a client can set freely
- ✕ Disabling TLS verification or CSRF protection to unblock a test
- ✕ Wide-scope tokens with no expiry
◎ 交付前验证
- ◎ The new code path is visible in logs end-to-end
- ◎ Dashboard panel added or updated to match the new metric
- ◎ Alert routing tested once end-to-end
同分类条目
11 篇质量与评审
Static Analysis 工程规则
Static analysis rules: treat warnings as errors for new code and justify exceptions
质量与评审
Code Review 工程规则
Review rules: risk-first reading, bounded diffs and reproducible verification
质量与评审
Refactoring 工程规则
Refactoring rules: characterisation tests before structural change
质量与评审
Legacy Modernisation 工程规则
Legacy rules: strangler-fig slices with a measurable seam
质量与评审
Error Budget 工程规则
Reliability rules: error budgets gate feature work, not opinions