Security Patterns

Document security patterns for end-to-end encryption, JWT authentication, and file transfer quarantine.

Updated Mar 11, 2026

Search Tags:#security #authentication #protocol #encryption #privacy #file transfer

Ready to run

npx skills add https://github.com/Glorktelligence/Bastion --skill security-patterns-glorktelligence

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Security Patterns
Source: https://github.com/Glorktelligence/Bastion/tree/main/.claude/skills/security-patterns
Command: npx skills add https://github.com/Glorktelligence/Bastion --skill security-patterns-glorktelligence

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides essential security patterns and principles for implementing secure communication, authentication, and file transfer mechanisms, ensuring data integrity and privacy.

Core Features & Use Cases

End-to-End Encryption: Ensures messages and files are encrypted from sender to receiver, with the relay having no access to plaintext.
Robust Authentication: Implements JWT-based authentication for clients and secure methods for admin access.
File Transfer Airlock: Guarantees all file transfers pass through a secure quarantine process with hash verification at multiple stages.
MaliClaw Clause: A hardcoded, non-bypassable blocklist for AI providers to prevent known malicious entities.
Use Case: Implementing a secure messaging system where sensitive data must be protected from interception and unauthorized access, even by the communication infrastructure itself.

Quick Start

Review the security patterns for implementing end-to-end encryption in your application.

Frequently Asked Questions about Security Patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement end-to-end encryption for secure messaging protocols?▼

End-to-end encryption for secure messaging protocols ensures messages and files are encrypted from sender to receiver, preventing the communication relay from accessing plaintext. This pattern enforces zero-trust principles for privacy-first data transmission.

What is the best way to set up JWT authentication for secure client communication?▼

JWT authentication for secure client communication validates clients via signed tokens, while admin access requires separate secure methods. This robust authentication pattern maintains strict, default-deny access controls across the communication infrastructure.

How does a file transfer quarantine process ensure data integrity?▼

A file transfer quarantine process ensures data integrity by passing all transfers through a secure airlock with hash verification at multiple stages. This approach guarantees files are safely isolated and validated before reaching the end receiver.

Can I enforce a hardcoded blocklist to prevent known malicious AI providers?▼

Yes, you can enforce a hardcoded blocklist to prevent known malicious AI providers using the non-bypassable MaliClaw Clause. This strict security measure permanently restricts known malicious entities to maintain a secure communication channel.

When do I need zero-trust and default-deny access controls for my application?▼

You need zero-trust and default-deny access controls when building secure messaging systems where sensitive data must be protected from interception. This ensures privacy-first, auditable communication channels even against unauthorized infrastructure access.