Symfony Voters (Symfony)

Use when

• Hardening access-control or validation boundaries.

• Aligning voters/security expressions with domain rules.

Default workflow

• Map actor/resource/action decision matrix.

• Implement voter/constraint logic at the right boundary.

• Wire checks at controllers and API operations.

• Test allowed/forbidden/invalid paths comprehensively.

Guardrails

• Avoid policy logic duplication across layers.

• Do not leak privileged state via error detail.

• Preserve explicit deny behavior for sensitive actions.

Progressive disclosure

• Use this file for execution posture and risk controls.

• Open references when deep implementation details are needed.

Output contract

• Security boundary updates.

• Integration points enforcing decisions.

• Negative-path test results.

References

• reference.md

• docs/complexity-tiers.md