# 060102 Zero Trust

> Zero Trust authentication pattern — validate identity once at entry, propagate via userRole, never trust client-provided role data.

- Skill: `natuleadan/060102-zero-trust` (Agent Skill, multi-file: 8 files)
- Install (CLI): `npx skillmds@latest add natuleadan/060102-zero-trust`
- Raw SKILL.md: https://api.skillmd.com/api/skills/natuleadan/060102-zero-trust/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- License: MIT
- Author: natuleadan (https://skillmd.com/u/natuleadan)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/natuleadan/060102-zero-trust

---


# Zero Trust Authentication

Zero Trust authentication pattern: validate identity at the entry point, propagate via `userRole` parameter, never accept role data from the client.

## References

| Topic | File |
|---|---|
| Core principle, architecture flow, role types, security rules | [references/zero-trust.md](references/zero-trust.md) |
| Identity propagation through layers | [references/role-propagation.md](references/role-propagation.md) |
| Data filtering, visibility, soft-delete, ownership conventions | [references/data-filtering.md](references/data-filtering.md) |
| Full Action→Service→Repository code example | [references/implementation-examples.md](references/implementation-examples.md) |
| Correct vs wrong patterns, implementation checklist | [references/quick-reference-good-bad.md](references/quick-reference-good-bad.md) |