Secure Engineering Standards

Purpose

This section defines the secure engineering controls used in AIC delivery.

It turns secure-by-design principles into practical developer and repository standards.

What This Section Covers

• secure coding and design rules

• authentication, authorization and secrets

• logging, cryptography and validation

• dependency, vulnerability and SBOM controls

Use This Section When

Use this section when:

• building or reviewing secure features

• checking baseline security controls

• preparing evidence for assurance