Architecture Decision Records¶
This directory records the load-bearing design decisions of the secsy-pki
enterprise edition. Each ADR captures one decision that is already
implemented on the main branch: the context that forced it, the choice
made, and the consequences operators live with.
ADRs are immutable once accepted. If a decision changes, add a new ADR that supersedes the old one rather than editing history.
| ADR | Decision | Status |
|---|---|---|
| 0001 | Backend-agnostic key-provider abstraction | Accepted |
| 0002 | HSM keys are generated on-device and never extractable | Accepted |
| 0003 | Pre-issuance and transport gates fail closed | Accepted |
| 0004 | Intermediate-CA rotation via dual-chain overlap | Accepted |
| 0005 | ML-DSA (FIPS 204) for post-quantum and catalyst-hybrid certs | Accepted |
| 0006 | Four-eyes (maker-checker) approval for sensitive operations | Accepted |
Related documentation¶
- Documentation map — every enterprise guide, grouped by topic
- Architecture overview
- Operator runbook — day-2 procedures that put these decisions into practice
- Security review & hardening