REFERENCE ARCHITECTURE 03 / 09
Public demand arrives in bursts.
Accessible workflows, surge control and graceful degradation.
Explore a failure mode ↘SYSTEM BOUNDARIES
Where responsibility changes.
01Accessible entry→
02Workflow→
03Rate + queue→
04Visibility✓
Four design boundaries. The specific technology stack, data rights and operating model depend on the real environment.
DESIGN EXERCISE / FAILURE LAB
What happens when
the assumption breaks?
Choose a realistic failure condition to inspect a defensible response and the verification evidence it would require.
RESPONSE CONTRACT01 / 02
Architecture response
Queue noncritical work and keep critical paths reliable.
HOW TO VERIFY
Burst tests and queue recovery.
TRADE-OFF TO ACCEPT
Degradation requires agreement about essential vs optional service.
BACK TO PRACTICE