The End-to-End Argument

Functions belong at the endpoints; lower layers can only optimize, never guarantee. The single most useful design principle in networking.

Saltzer and Schroeder's Principles

Least privilege, fail-safe defaults, economy of mechanism; plus the confused deputy as the canonical violation.