AsiBackbone

Why this outcome was permitted, under which policy, with what evidence.

AsiBackbone provides open-source .NET learning resources, a secure ASP.NET Core application template, and a governance framework for systems that need explainable, auditable decisions. Start with the learning resources, use the template on its own, or follow the reference application to see governed execution in practice.

Most applications don't need a governance layer; when yours does, the framework enforces policy and records the evidence behind each governed decision.

Learn, ask, and contribute

Learning is the first stop for understanding the patterns. Use organization Q&A for project-specific and cross-project questions, and name the affected repository and version. Route concrete work to the affected repository's issues and contribution guidance.

Start learning

Read tutorials, run labs, and compare the patterns with simpler alternatives before choosing an implementation.

Report concrete work

Use the affected repository's issue tracker for actionable bugs, documentation corrections, and scoped feature work.

Report a sensitive security concern

Do not post vulnerability details publicly. Follow the affected repository's private reporting policy.

Projects

Learn the patterns

AsiBackbone Learning

Practical .NET architecture tutorials, labs, runnable samples, and reference patterns for governed execution, secure applications, AI integration, and policy-driven systems. It includes comparisons that show when these patterns are unnecessary. Start here to understand the reasoning before evaluating any implementation.

Add governed decisions

AsiBackbone

A .NET governance and policy-control framework for auditable AI and enterprise decision flows: policy evaluation and policy-as-code, auditable decision records, acknowledgment workflows, capability-based authorization, host-owned execution boundaries, and ASP.NET Core integration.

Start a secure application

.NET Core Application Template

A reusable, production-oriented ASP.NET Core baseline with secure defaults: authentication and authorization, Serilog structured logging, security headers, rate limiting, EF Core with SQL Server and SQLite, reverse proxy support, and Problem Details error handling. It is not a finished, penetration-tested, or certified application; each generated application still requires application-specific configuration, threat analysis, deployment controls, testing, and security review.

Follow the integration

AsiBackbone Reference Application

An NCAT-generated ASP.NET Core host that records the step-by-step integration of AsiBackbone. Follow the walkthrough from the preserved NCAT baseline through package integration, governance rules, governed endpoints, and audit evidence.

Design philosophy

We favor architectures where consequential operations are explicit, constrained, reviewable, and auditable.

We also document when these patterns are unnecessary. See When ASP.NET Core Authorization Is Enough and When a Simple Application Service Is Enough.

The projects focus on practical .NET engineering. They do not claim regulatory certification or automatic compliance.

Support AsiBackbone

AsiBackbone is developed and maintained as an open-source organization. Sponsorship helps support documentation, learning resources, project maintenance, infrastructure, and continued development.

Support AsiBackbone on Patreon

Sponsorship is voluntary and does not provide roadmap priority, governance authority, or preferential technical support. You can also support the organization by contributing to its open-source projects.