> For the complete documentation index, see [llms.txt](https://framework.aic.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards.md).

# Secure Engineering Standards

## Purpose

This section defines the secure engineering controls used in AIC delivery.

It turns secure-by-design principles into practical developer and repository standards.

## What This Section Covers

* secure coding and design rules
* authentication, authorization and secrets
* logging, cryptography and validation
* dependency, vulnerability and SBOM controls

## Use This Section When

Use this section when:

* building or reviewing secure features
* checking baseline security controls
* preparing evidence for assurance
