Architecture Decision Records

Decisions that will be questioned later, with the reasoning that produced them. Each record states what was decided, what it cost, and what would make it wrong — so a future change can tell "this was considered and rejected" apart from "nobody thought about it".

Records are immutable once merged. A decision that changes gets a new record superseding the old one, not an edit.

A record whose reasoning turns out to be overstated is the one case that is corrected in place, in a dated section that leaves the original claim visible. Rewriting the argument silently would defeat the point of writing it down; removing the record would lose the fact that the decision was made on a weaker basis than it appeared.

#	Decision	Status
0001	Unauthenticated probes use a second, credential-free transport	Accepted
0002	Every finding cites the requests that produced it; the score is derived from findings	Accepted
0003	Secrets are redacted structurally at the recorder, and content types are not trusted	Accepted
0004	Only tools declaring readOnlyHint are invoked by default	Accepted
0005	The hosted diagnostic is the same binary, and it accepts no credentials	Accepted