Architecture decisions
A portfolio of architecture should show what was decided, why and with what evidence — not only what was drawn.
Each entry keeps the constraint, the trade-off and the reusable principle. Institution identifiers and exploitable implementation detail are omitted.
Platform
Resilience
Evidence / Audit
Layering
Security / Identity
- AD-05Platform-to-appliance trustPropagate identity claims only where the business decision requires them.ADR
- AD-07Session takeover policySeparate session policy from enforcement mechanism.ADR
- AD-10Cryptographic conformity before deploymentValidate irreversible platform modes before deployment artifacts exist.Analysis
- AD-11Extended cryptoperiod with bounded rotationCryptographic policy must model the data-dependency window.ADR