novolis-governance / extraction-briefs/wave-4-security.md
Wave 4 — Security
Policies that keep the org coherent
dotnetgovernancenovolis
Target repo: novolis-security Naming: frank-naming-and-structure.md
Scope (in)
| Frank | Novolis |
|---|---|
| `Frank.Security.Cryptography` (generation) | `Novolis.Security.Secrets` |
| `Frank.Security.Cryptography` (hashing) | `Novolis.Security.PasswordHashing` |
| `Frank.Security.Cryptography` (string AES) | `Novolis.Security.Encryption` |
| `Frank.Security.HaveIBeenPwned` | `Novolis.Security.HaveIBeenPwned` |
| `Frank.Security.Resources` (word lists) | `Novolis.Security.WordLists` (internal, not packable) |
| Tests | `tests/Novolis.Security.Tests` |
Out of scope
- Meta package
Novolis.Securityumbrella
Dependencies
Novolis.Testing.*for tests (wave 1)Novolis.Security.Secrets→Novolis.Security.WordLists- No
Frank.*in production code
Done when
- All facets on
net10.0, CI green - Registry entries for packable facets
- Frank.Security README banner