Law/context/08_security_model.md
2026-02-22 10:57:49 +03:00

16 lines
No EOL
267 B
Markdown

# Security Model Context
## Public
- OTP verification required
- JWT in httpOnly cookie (7 days)
- Rate limiting
- Protection from brute force
## Admin
- JWT bearer
- RBAC
- Audit log required
## Data Protection
- Immutable after status change
- All actions logged