Architecture decision records

Status: Accepted · Version: 0.1

Stage 0 minimum. An earlier sketch numbered four decisions differently (do-not-store-secrets, controlled-release, event-driven life-check, zero-trust recipient access). Those decisions are kept. This numbering is canonical:

ADR Decision Supersedes sketch name
ADR-001 Modular monolith first —
ADR-002 Never store user secrets Do not store secrets
ADR-003 Explicit recipient-scoped vaults Zero-trust recipient access
ADR-004 Release via evidence state machine Controlled release, and event-driven life check
ADR-005 Manual review before real release Part of controlled release
ADR-006 Envelope encryption —
ADR-007 Event-driven audit trail —

New cross-cutting decisions get the next number. Do not reuse a number.