Docs / Architecture Decisions
Architecture Decision Records
130 records that document why VayuPress is built the way it is — newest first.
ADR-0160 · a page that says run again must offer itADR-0160-a-page-that-says-run-again-must-offer-itADR-0159 · what a domain serves is changeableADR-0159-what-a-domain-serves-is-changeableADR-0158 · the shield must never ban the machine it protectsADR-0158-the-shield-must-never-ban-the-machine-it-protectsADR-0157 · nothing may write into a directory nginx includesADR-0157-nothing-may-write-into-a-directory-nginx-includesADR-0156 · the write connection must not be a single point of failureADR-0156-the-write-connection-must-not-be-a-single-point-of-failureADR-0155 · certificates without a restartADR-0155-certificates-without-a-restartADR-0154 · one console per siteADR-0154-one-console-per-siteADR-0153 · domain independenceADR-0153-domain-independenceADR-0152 · agency hostingADR-0152-agency-hostingADR-0151 · vayuflow automation engineADR-0151-vayuflow-automation-engineADR-0150 · vayuveil endpoint observation controlADR-0150-vayuveil-endpoint-observation-controlADR-0149 · third party network intelligenceADR-0149-third-party-network-intelligenceADR-0148 · multi node verdict sharingADR-0148-multi-node-verdict-sharingADR-0147 · per client connector pagesADR-0147-per-client-connector-pagesADR-0146 · buzz connectorADR-0146-buzz-connectorADR-0145 · vayukeep continuous encrypted replicationADR-0145-vayukeep-continuous-encrypted-replicationADR-0144 · vayumail account recoveryADR-0144-vayumail-account-recoveryADR-0143 · tor space anonymity modelADR-0143-tor-space-anonymity-modelADR-0142 · vayutalk onion to onion deliveryADR-0142-vayutalk-onion-to-onion-deliveryADR-0141 · vayuos spaces clearnet torADR-0141-vayuos-spaces-clearnet-torADR-0140 · vayu mcp oauthADR-0140-vayu-mcp-oauthADR-0139 · vayu mcp connectorADR-0139-vayu-mcp-connectorADR-0138 · vayutor onion servicesADR-0138-vayutor-onion-servicesADR-0137 · vayushield aegis surge and swarm scaleADR-0137-vayushield-aegis-surge-and-swarm-scaleADR-0136 · premium ux motion and alpine cspADR-0136-premium-ux-motion-and-alpine-cspADR-0135 · vayu compatibility bibleADR-0135-vayu-compatibility-bibleADR-0134 · vayuapi fine grained keysADR-0134-vayuapi-fine-grained-keysADR-0133 · public docs siteADR-0133-public-docs-siteADR-0132 · vayudomains multi domainADR-0132-vayudomains-multi-domainADR-0131 · vayutalk ephemeral messagingADR-0131-vayutalk-ephemeral-messagingADR-0130 · vayumail retention auto deleteADR-0130-vayumail-retention-auto-deleteADR-0129 · vayumail device approvalADR-0129-vayumail-device-approvalADR-0128 · vayumail private key syncADR-0128-vayumail-private-key-syncADR-0127 · brand refresh and live stars siteADR-0127-brand-refresh-and-live-stars-siteADR-0126 · vayumail app password consoleADR-0126-vayumail-app-password-consoleADR-0125 · vayumail per account signaturesADR-0125-vayumail-per-account-signaturesADR-0124 · vayumail outbound reliabilityADR-0124-vayumail-outbound-reliabilityADR-0123 · vayushield privileged agentADR-0123-vayushield-privileged-agentADR-0122 · network hardening tiers uiADR-0122-network-hardening-tiers-uiADR-0121 · gdpr safe visitor locationADR-0121-gdpr-safe-visitor-locationADR-0120 · collapsible htmx shield consoleADR-0120-collapsible-htmx-shield-consoleADR-0119 · hot path latency budgetADR-0119-hot-path-latency-budgetADR-0118 · vayushield auto block and learningADR-0118-vayushield-auto-block-and-learningADR-0117 · vayuos read path resilienceADR-0117-vayuos-read-path-resilienceADR-0116 · vayu theme and self hosted fontsADR-0116-vayu-theme-and-self-hosted-fontsADR-0115 · website at root blog subpathADR-0115-website-at-root-blog-subpathADR-0114 · custom website zip deployADR-0114-custom-website-zip-deployADR-0113 · memory footprint budget and search index windowingADR-0113-memory-footprint-budget-and-search-index-windowingADR-0112 · vayushield resilience tiersADR-0112-vayushield-resilience-tiersADR-0111 · vayushield bot protection and analyticsADR-0111-vayushield-bot-protection-and-analyticsADR-0110 · incremental search index persistenceADR-0110-incremental-search-index-persistenceADR-0109 · writable binary location for self updateADR-0109-writable-binary-location-for-self-updateADR-0108 · vayumail autoconfig and discovery hardeningADR-0108-vayumail-autoconfig-and-discovery-hardeningADR-0107 · self hosted htmxADR-0107-self-hosted-htmxADR-0106 · vayumail namespace rotating qrADR-0106-vayumail-namespace-rotating-qrADR-0105 · encrypted operator backupsADR-0105-encrypted-operator-backupsADR-0104 · business websites host topologyADR-0104-business-websites-host-topologyADR-0103 · member experience and threaded commentsADR-0103-member-experience-and-threaded-commentsADR-0102 · unified identity and bootstrap adminADR-0102-unified-identity-and-bootstrap-adminADR-0101 · builtin search vayufindADR-0101-builtin-search-vayufindADR-0100 · storage panel update activation infra rbacADR-0100-storage-panel-update-activation-infra-rbacADR-0099 · self contained one click updateADR-0099-self-contained-one-click-updateADR-0098 · role scoped vayuos accessADR-0098-role-scoped-vayuos-accessADR-0097 · vayuanalytics no piiADR-0097-vayuanalytics-no-piiADR-0096 · vayumail imap pop3 clientsADR-0096-vayumail-imap-pop3-clientsADR-0095 · index self check and pages indexADR-0095-index-self-check-and-pages-indexADR-0094 · lazy per page cache invalidationADR-0094-lazy-per-page-cache-invalidationADR-0093 · indexed tag membershipADR-0093-indexed-tag-membershipADR-0092 · block editor v2 and low impact deploysADR-0092-block-editor-v2-and-low-impact-deploysADR-0090 · newsletter consoleADR-0090-newsletter-consoleADR-0089 · vayuos one click update and backupADR-0089-vayuos-one-click-update-and-backupADR-0088 · api keys and encrypted credentialsADR-0088-api-keys-and-encrypted-credentialsADR-0087 · subscription engine v2ADR-0087-subscription-engine-v2ADR-0086 · theme whole site designADR-0086-theme-whole-site-designADR-0085 · vayumail outbound smarthost relayADR-0085-vayumail-outbound-smarthost-relayADR-0084 · vayumail outbound deliverabilityADR-0084-vayumail-outbound-deliverabilityADR-0083 · vayumail roles searchADR-0083-vayumail-roles-searchADR-0082 · theme studio code editorADR-0082-theme-studio-code-editorADR-0081 · editor inline markdownADR-0081-editor-inline-markdownADR-0080 · security update watcherADR-0080-security-update-watcherADR-0079 · vayumail transport security and inbound authADR-0079-vayumail-transport-security-and-inbound-authADR-0078 · vayumail inbound optinADR-0078-vayumail-inbound-optinADR-0077 · vayumail outbound pure goADR-0077-vayumail-outbound-pure-goADR-0076 · vayupgp at rest keysADR-0076-vayupgp-at-rest-keysADR-0075 · draft publish workflowADR-0075-draft-publish-workflowADR-0074 · plugin interface specADR-0074-plugin-interface-specADR-0073 · convert to blocksADR-0073-convert-to-blocksADR-0072 · tools plugins panelADR-0072-tools-plugins-panelADR-0071 · theme studioADR-0071-theme-studioADR-0070 · sovereign rich mediaADR-0070-sovereign-rich-mediaADR-0069 · admin v2 retirement planADR-0069-admin-v2-retirement-planADR-0068 · admin v3 next gen uiADR-0068-admin-v3-next-gen-uiADR-0067 · enterprise interfacesADR-0067-enterprise-interfacesADR-0066 · content polish layerADR-0066-content-polish-layerADR-0065 · admin ui csp compliant stackADR-0065-admin-ui-csp-compliant-stackADR-0064 · sovereign self updateADR-0064-sovereign-self-updateADR-0063 · gated budget actuationADR-0063-gated-budget-actuationADR-0062 · phase omega consolidationADR-0062-phase-omega-consolidationADR-0061 · sovereign platform p2 p3ADR-0061-sovereign-platform-p2-p3ADR-0060 · modular deploy migration sqliteADR-0060-modular-deploy-migration-sqliteADR-0059 · filesystem syscall confinementADR-0059-filesystem-syscall-confinementADR-0058 · kernel level isolation resource domainsADR-0058-kernel-level-isolation-resource-domainsADR-0057 · security sandboxing capability enforcementADR-0057-security-sandboxing-capability-enforcementADR-0056 · process isolation runtime sandboxingADR-0056-process-isolation-runtime-sandboxingADR-0055 · resource governance execution isolationADR-0055-resource-governance-execution-isolationADR-0054 · structured tracing execution spansADR-0054-structured-tracing-execution-spansADR-0053 · observability correlation architectureADR-0053-observability-correlation-architectureADR-0052 · idempotency event evolutionADR-0052-idempotency-event-evolutionADR-0051 · transactional consistency event reliabilityADR-0051-transactional-consistency-event-reliabilityADR-0050 · persistence transport maturityADR-0050-persistence-transport-maturityADR-0049 · thin handlers service boundariesADR-0049-thin-handlers-service-boundariesADR-0048 · route domains service extractionADR-0048-route-domains-service-extractionADR-0047 · app container handler refactorADR-0047-app-container-handler-refactorADR-0046 · runtime architecture service boundariesADR-0046-runtime-architecture-service-boundariesADR-0045 · internal package decompositionADR-0045-internal-package-decompositionADR-0044 · repository decompositionADR-0044-repository-decompositionADR-0043 · integration testsADR-0043-integration-testsADR-0042 · backup restore automationADR-0042-backup-restore-automationADR-0041 · health contractsADR-0041-health-contractsADR-0040 · config versioningADR-0040-config-versioningADR-0039 · deploy sourced componentsADR-0039-deploy-sourced-componentsADR-0038 · vacuum cooldownADR-0038-vacuum-cooldownADR-0037 · pprof rate limitADR-0037-pprof-rate-limitADR-0036 · csp nonceADR-0036-csp-nonceADR-0035 · dead letter queue safetyADR-0035-dead-letter-queue-safetyADR-0034 · migration checksum driftADR-0034-migration-checksum-driftADR-0033 · wal adaptive checkpointADR-0033-wal-adaptive-checkpointADR-0032 · plugin pool waitgroupADR-0032-plugin-pool-waitgroupADR-0002 · self hosted fontsADR-0002-self-hosted-fontsADR-0001 · sqlite firstADR-0001-sqlite-first