The architectural choices worth preserving: integration boundaries, security guarantees, storage tradeoffs, and deployment constraints. Relevant rejected approaches are summarized within each decision.
- 0001: Preserve the SimpleDMS import contract
- 0002: Same-repository Go companion backend
- 0003: User-scoped authorization and file IDs
- 0004: Read-only, expiring, single-use tokens
- 0005: Bounded in-memory tokens and one instance
- 0006: Same-origin deployment and verified TLS
- 0007: Protected public-link handoff
ADRs 0002 through 0006 describe the removed companion design and are superseded by ADR 0007.
Supporting documents: