Architecture decision records¶
Significant architectural decisions, one file each, numbered in the order they were made. Each record states the context at the time, the decision, the alternatives considered and the consequences, so later readers can tell why the code looks the way it does, not just what it does.
A record is never rewritten once accepted. A later decision that changes it is a new record that says which one it supersedes.
| ADR | Title | Status |
|---|---|---|
| 0001 | QueryAPIGate Console: a React/TypeScript frontend over a versioned Management API | Accepted |
| 0002 | Event ids stay execution_history row ids in 0.13; a future events table continues them | Accepted |
| 0003 | Named administrators with fixed roles, signing in with personal admin tokens | Accepted |
| 0004 | Exports to object storage - destinations, saved exports, incremental runs | Accepted |
| 0005 | Column masking - rules on keys, roles and exports, traced to source columns, failing closed | Accepted |
| 0006 | AI agents - the MCP server as an OAuth resource server, descriptions agents read, a per-agent usage view | Accepted |
| 0007 | Console sign-in through the organisation's identity provider (OpenID Connect) | Accepted |
| 0008 | Write tools over MCP, each write approved by a person before it runs | Accepted |
| 0009 | Rotating the encryption key, and reissuing an API key's secret | Accepted |
| 0010 | Distributed tracing with OpenTelemetry, and security headers on every response | Accepted |
| 0011 | Per-key limits on concurrency, time and rows, and usage quotas | Accepted |
| 0012 | A tamper-evident audit log, streamed to a SIEM | Accepted |
| 0013 | A Helm chart | Accepted |
| 0014 | Configuration as code | Accepted |
| 0015 | Secrets managers and short-lived credentials | Accepted |
| 0016 | Where data goes, and FIPS-validated cryptography | Accepted |
| 0017 | What graduates for 1.0.0-rc1 | Accepted |
| 0018 | Signed releases, and what they're built from | Accepted |
| 0019 | The SIEM stream, against real receivers | Accepted |
| 0020 | The event log: events stop being a view on run history | Accepted |
| 0021 | Live events, and secrets from files and Vault, graduate | Accepted |
| 0022 | MongoDB streaming exports, and MongoDB graduates | Accepted |
| 0023 | Workspaces: delegated administration for teams | Accepted |
Statuses: Proposed (under discussion) → Accepted (in effect) → optionally Superseded by NNNN or Deprecated.