AsiBackbone is an open-source organization for practical .NET governance and architecture. Most applications don't need a governance layer. When you do need one, because you have to explain why an operation was permitted, under which policy, and with what evidence, these are the patterns and the working implementations.
The organization maintains three related projects covering policy-as-code, auditable decision systems, capability-based authorization, host-owned execution boundaries, AI governance, and secure ASP.NET Core application architecture.
Practical .NET architecture tutorials, labs, runnable samples, and reference patterns for governed execution, secure applications, AI integration, and policy-driven systems. It includes comparisons that show when these patterns are unnecessary. Start here to understand the reasoning before evaluating any implementation.
A .NET governance and policy-control framework for auditable AI and enterprise decision flows: policy evaluation and policy-as-code, auditable decision records, acknowledgment workflows, capability-based authorization, host-owned execution boundaries, and ASP.NET Core integration.
A secure-by-default ASP.NET Core enterprise application template: authentication and authorization, Serilog structured logging, security headers, rate limiting, EF Core with SQL Server and SQLite, reverse proxy support, and Problem Details error handling.
We favor architectures where consequential operations are explicit, constrained, reviewable, and auditable.
We also document when these patterns are unnecessary. See When ASP.NET Core Authorization Is Enough and When a Simple Application Service Is Enough.
The projects focus on practical .NET engineering. They do not claim regulatory certification or automatic compliance.
