dorfteich/docs/architecture/adr
Claude Fable 5 05a979bac3
Some checks failed
CI / Lint, typecheck, test (pull_request) Successful in 6m25s
CI / Build container images (pull_request) Successful in 2m58s
CI / Auth e2e pack (pull_request) Successful in 8m35s
CI / Import/export fidelity gate (pull_request) Successful in 1m7s
CD / Deploy to Test (push) Blocked by required conditions
CD / Smoke tests against Test (push) Blocked by required conditions
CD / Promote to Int (push) Blocked by required conditions
CI / Auth e2e pack (push) Blocked by required conditions
CI / Import/export fidelity gate (push) Blocked by required conditions
CI / Build container images (push) Blocked by required conditions
CI / Lint, typecheck, test (push) Has been cancelled
CD / Build and push images (push) Has been cancelled
#222: read-access trail for classified pages
Instrument every full-content read channel for pages with
classification = vs_nfd (ADR 0023, variant A): SPA state fetch and read
rendering, public JSON content, no-JS shell, expanded embeds, public API
GET (incl. the MCP read_page path and write echoes), attachment download
under the #212 effective classification, all export shapes (markdown,
pond ZIP, account data export, queued docx/odt/pdf at enqueue), and
collab-token issuance as the api-side proxy for the WS join.

Events land in the new read_events table (no FKs — evidence survives
page purges and hard user deletions) with actor, session key
(session:/token:/job:/anon), page, pond, channel and the classification
at read time. Recording failures are NOT swallowed: a failed write
aborts the read (hard failure, the deliberate contrast to AuditService —
decision recorded in ADR 0023 and security.md §Logging, together with
the recorded residuals: content fragments and feeds).

One e2e test per channel proves both the event and its absence for
unclassified pages, plus the hard-failure semantics.

Refs #222.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8
2026-07-31 12:12:55 +02:00
..
0001-typescript-monorepo.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0002-postgresql.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0003-yjs-crdt-collaboration.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0004-tiptap-editor.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0005-react-vite-frontend.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0006-nestjs-prisma-backend.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0007-auth-sessions-oidc-ready.md #190: configurable session lifetime with a server-side idle timeout 2026-07-30 11:11:15 +02:00
0008-plugin-sandbox.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0009-import-export-converters.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0010-postgres-fulltext-search.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0011-file-storage-quotas.md Scaffold pnpm monorepo with lint, format, and test tooling 2026-07-04 19:06:27 +02:00
0012-i18n.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0013-versioning-and-trash.md Scaffold pnpm monorepo with lint, format, and test tooling 2026-07-04 19:06:27 +02:00
0014-gitea-actions-cicd.md Move the stage directories to /srv/DOCKER (host consolidation) 2026-07-14 12:43:29 +02:00
0015-backup-strategy.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0016-self-hosted-fonts.md Add architecture documentation, ADRs, and operations concept 2026-07-04 14:36:16 +02:00
0017-accessibility-by-default.md docs: ADR 0017 — Barrierefreiheit als Standard-Anforderung 2026-07-21 17:17:26 +02:00
0018-color-theming.md #186: pond accent theming — scoped derivation, cascade pond > user > default 2026-07-29 09:09:36 +02:00
0019-no-security-base-functions.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
0020-token-crypto-key-separation.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
0021-external-authentication.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
0022-page-classification.md #212: mark attachment downloads by filename prefix and companion file 2026-07-31 07:29:16 +02:00
0023-read-access-audit-trail.md #222: read-access trail for classified pages 2026-07-31 12:12:55 +02:00
0024-reproducible-offline-deployment.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
0025-plugin-trust-model.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00
0026-backup-target-restriction.md docs: VS-NfD readiness planning (ist-aufnahme, plan, ADRs 0019-0026, issue drafts) 2026-07-30 01:48:05 +02:00