A living record of the architecture: card data isolation, the money ledger, tenancy, authorization, and the flows that move real money. Each decision grounded in the code, with the trade-offs it accepted.
Card data is quarantined at the edge; the core platform and its data stores only ever see tokens.
The flagship decisions, drawn. Each links to the full record.
Grouped by subsystem, in the order they were recorded.