Architecture Decision Records

Numbered, immutable once accepted; superseding decisions get new ADRs that reference the old. Format: Context / Decision / Consequences.

#	Decision	Status
0001	Full Datomic topology from day one	Accepted
0002	Clojurust at the boundary only	Accepted
0003	Custom immutable content-addressed segments	Accepted
0004	Full Datalog + Pull executing on the peer	Accepted
0005	Full time model in the first milestone set	Accepted
0006	gRPC control plane + custom tagged value encoding	Accepted
0007	In-memory + filesystem backends first	Accepted
0008	Sandboxed Clojurust database functions	Accepted, amended (cljrs-tx runtime)
0009	Core Datomic schema scope for v1	Accepted
0010	Single transactor now, lease-based HA designed in	Accepted
0011	Peer-local read-only SQL over namespace projections	Accepted
0012	Optional, request-scoped authentication and authorization	Accepted
0013	PostgreSQL wire-protocol front end for read-only SQL	Accepted
0014	Self-hosted relationship-based authorization in a Corium database	Accepted
0015	Guarded autocommit SQL DML through the transactor	Accepted
0016	Transaction time as data (:db/txInstant datoms, instant-named views)	Accepted
0017	Envelope encryption at rest for every durable artifact	Proposed
0018	Attribute-level protection with per-class keys	Proposed
0019	An operator peer service for management duties	Proposed
0020	Plan and apply schema migrations as basis-versioned data	Accepted
0021	Contextual read authorization on the peer server and pgwire	Accepted
0022	Runtime-pluggable storage backends	Accepted