posts
Architecture Decision Records
Decisions recorded before they are defended, with the rejected alternatives attached. Each record states the context that constrained the choice, the choice itself, and what it costs.
ADR-005: Regional Data Residency and Hierarchical Encryption
Regional data residency with hierarchical customer-managed encryption keys for a multi-jurisdictional claims portal, with the critique, fixes, and validation that followed.
ADR-006: Security Architecture for a Retail Loyalty Platform
A Zero Trust security approach for a cloud-native retail loyalty platform, including the PCI-DSS scope decision and loyalty-specific fraud controls, with the critique and fixes that followed.