Concept失败即关闭 / fail-closed design

Fail-Closed

A security system design principle in which a system defaults to denying operations rather than allowing them when it encounters errors, missing information, or uncertain states. It is the opposite of fail-open and is commonly applied in access gates, firewalls, and access control components to minimize the risk of unintended authorization.

Timeline (last 90 days)

Oct 15

Most security-sensitive systems favor a Fail-Closed degradation strategy, supplemented by mitigations such as automatic escalation on timeout and backup approval channels.

Unverified50%

All Facts (1)

Unverified

Most security-sensitive systems favor a Fail-Closed degradation strategy, supplemented by mitigations such as automatic escalation on timeout and backup approval channels.

50%

Source Articles

Pay-Per-Use FX Rate API for AI Agents: Direct ECB Reference RatesOct 19 Release Gate Design: Why Must It Fail-Closed?Oct 19 200-Line Python Tool agentverify: Catching AI Agent Data ExfiltrationOct 13 Agent Hook Security Mechanisms Compared: Claude Code, Codex, Cursor, and Gemini CLI — Which Is Most Reliable?Oct 12 Licensing a Voice Is Not Licensing Every Message: The Boundary Problem in AI Voice AuthorizationOct 12 The RAG Permissions Clock Problem: Why Access Control for Enterprise Data Lakes Can't Be BatchedOct 12 Blocking AI Agent Patches with an Allowlist Gate: A Fail-Closed Practical GuideOct 11