AD-05 · ADR

Platform-to-appliance trust

Decision: One client per domain with certificate-bound tokens, and no duplicated user session downstream.
Outcome: Removed propagation of the user session into the southern integration boundary.

Reusable principle

Propagate identity claims only where the business decision requires them.

Published without institution identifiers or exploitable implementation detail, per the portfolio publication rule.