defensive-depth

defensive-depth is a human-made security architecture that layers multiple independent controls so the failure of any single one does not compromise the protected asset. It is carved by: (1) heterogeneous barriers (different mechanisms, not redundant copies of the same), (2) independence (failure of one layer does not impair others), (3) progression resistance (an attacker must defeat each layer sequentially, increasing detection probability and effort), and (4) coverage gaps (deliberately overlapping zones of control to eliminate blind spots). It persists through design standards, security policies, and implementation practices that mandate layered protection in system architecture. [formal: defensiopluralis | substrate: behavior | horizon: a life | explicit: yes | epoch: 0.42]