Mistake Clinic
Module-Specific Mistake Radar
| Mistake | Signal | Repair |
|---|---|---|
| Control-first design | No named threat | Model asset and attacker |
| Home-grown crypto | Informal composition | Use standard protocol/library |
| Authentication equals authorization | Any user crosses tenant boundary | Enforce object action policy |
| Token signature only | Issuer/audience ignored | Validate complete token contract |
| Rotation without revocation test | Old key still works | Exercise compromise lifecycle |
Practice Mistake Checks
Verify threat assumptions, primitive contract, randomness, peer identity, replay, session lifecycle, recovery, audience, authorization, workload identity, audit, rotation, and residual risk.
Required evidence
Submit diagrams, versioned configuration, runnable positive and negative tests, audit events, one rejected design, remediation record, and residual-risk owner. Scanner output without mechanism-level triage does not pass.
Oral defense
Name the attacker and asset, explain the exact control property, demonstrate a denied misuse case, and execute revocation or safe recovery.
Source backbone
Use NIST SP 800-63, OWASP ASVS, relevant RFCs, and Building Secure and Reliable Systems.