Current Locked Decisions
- Start API rollout now using a strangler migration approach.
- Keep API private-first for first-party clients in early phases.
- Use shared database tenancy with strict workspace scoping.
- Use hybrid auth: web sessions + token auth, OAuth2 later for third parties.
- Target Stripe and QuickBooks first for integrations.
How ADRs Should Be Used
- Create a new ADR before changing a locked architecture decision.
- Document context, decision, alternatives, and migration impact.
- Link the ADR to affected code paths and tests.
- Mark replaced ADRs as superseded instead of deleting history.
Governance Notes
ADRs should remain concise, date-stamped, and implementation-aware. They are the authoritative source for why architecture and policy choices were made.
Source File
Decision history and ADR process live in docs/adr/README.md.