[ { "anchor": "overview", "approvers": [ "Stephen" ], "authorization_scope": "PUBLIC_INFORMATION", "availability_state": "NOT_AVAILABLE", "canonical_authority": "SRC-ARCHITECTURE-ATLAS-V2-2", "canonical_url": "/en/architecture/deployment-and-trust-boundaries", "capability_state": "IN_DEVELOPMENT", "chunk_id": "MYRILUM-DOC-ARCH-026@0.1.0:en:GLOBAL:overview", "citation_id": "MYRILUM-DOC-ARCH-026@0.1.0:en#overview", "command_authority": "NONE", "content_applicability": "SHARED_NEUTRAL", "content_digest": "26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6", "content_maturity": "DRAFTED", "doc_id": "MYRILUM-DOC-ARCH-026", "effective_at": null, "expires_at": null, "freshness_status": "CURRENT", "governance_status": "APPROVED", "last_verified_at": "2026-09-23", "limitations": "Read-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.", "locale": "en", "operational_effect": "NONE", "owner": "Web3Capital Documentation Steward", "product_id": null, "publication_status": "PUBLISHED_GLOBAL", "region": "GLOBAL", "requires_human_gate": true, "review_due_at": "2026-10-23", "safety_class": "INFORMATIONAL", "section_title": "What this page covers", "source_commit": "6b41cce4496de03c67a501aa94cd41ec6ac0e85a", "source_refs": [ "SRC-ARCHITECTURE-ATLAS-V2-2" ], "text": "Document: Deployment and trust boundaries (MYRILUM-DOC-ARCH-026, version 0.1.0).\nCanonical URL: /en/architecture/deployment-and-trust-boundaries#overview. Product: NOT_APPLICABLE.\nRegion: GLOBAL; locale: en; visibility: PUBLIC; publication: PUBLISHED_GLOBAL.\nContent: DRAFTED; governance: APPROVED; freshness: CURRENT.\nReality: IN_DEVELOPMENT; availability: NOT_AVAILABLE; authorization: PUBLIC_INFORMATION.\nAuthority: SRC-ARCHITECTURE-ATLAS-V2-2; source commit: 6b41cce4496de03c67a501aa94cd41ec6ac0e85a; content digest: 26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6.\nEffective: NOT_SET; expires: NOT_SET; verified: 2026-09-23; review due: 2026-10-23.\nSafety: INFORMATIONAL; human gate: true; operational_effect=NONE; command_authority=NONE.\nDocument governance assignment: owner=Web3Capital Documentation Steward; assigned approvers (not approval evidence)=Stephen.\nRead-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.\nWhat this page covers: This is MYRILUM's target architecture. It does not mean everything on the map is live; whether a capability can be used today is stated in “Current availability”.\nLogically several platforms; physically, a few controlled runtime units to begin with. This page states principles only; implementation details are not published.", "title": "Deployment and trust boundaries", "version": "0.1.0", "visibility": "PUBLIC" }, { "anchor": "boundaries-not-domains", "approvers": [ "Stephen" ], "authorization_scope": "PUBLIC_INFORMATION", "availability_state": "NOT_AVAILABLE", "canonical_authority": "SRC-ARCHITECTURE-ATLAS-V2-2", "canonical_url": "/en/architecture/deployment-and-trust-boundaries", "capability_state": "IN_DEVELOPMENT", "chunk_id": "MYRILUM-DOC-ARCH-026@0.1.0:en:GLOBAL:boundaries-not-domains", "citation_id": "MYRILUM-DOC-ARCH-026@0.1.0:en#boundaries-not-domains", "command_authority": "NONE", "content_applicability": "SHARED_NEUTRAL", "content_digest": "26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6", "content_maturity": "DRAFTED", "doc_id": "MYRILUM-DOC-ARCH-026", "effective_at": null, "expires_at": null, "freshness_status": "CURRENT", "governance_status": "APPROVED", "last_verified_at": "2026-09-23", "limitations": "Read-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.", "locale": "en", "operational_effect": "NONE", "owner": "Web3Capital Documentation Steward", "product_id": null, "publication_status": "PUBLISHED_GLOBAL", "region": "GLOBAL", "requires_human_gate": true, "review_due_at": "2026-10-23", "safety_class": "INFORMATIONAL", "section_title": "Deploy by boundary, not by domain", "source_commit": "6b41cce4496de03c67a501aa94cd41ec6ac0e85a", "source_refs": [ "SRC-ARCHITECTURE-ATLAS-V2-2" ], "text": "Document: Deployment and trust boundaries (MYRILUM-DOC-ARCH-026, version 0.1.0).\nCanonical URL: /en/architecture/deployment-and-trust-boundaries#boundaries-not-domains. Product: NOT_APPLICABLE.\nRegion: GLOBAL; locale: en; visibility: PUBLIC; publication: PUBLISHED_GLOBAL.\nContent: DRAFTED; governance: APPROVED; freshness: CURRENT.\nReality: IN_DEVELOPMENT; availability: NOT_AVAILABLE; authorization: PUBLIC_INFORMATION.\nAuthority: SRC-ARCHITECTURE-ATLAS-V2-2; source commit: 6b41cce4496de03c67a501aa94cd41ec6ac0e85a; content digest: 26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6.\nEffective: NOT_SET; expires: NOT_SET; verified: 2026-09-23; review due: 2026-10-23.\nSafety: INFORMATIONAL; human gate: true; operational_effect=NONE; command_authority=NONE.\nDocument governance assignment: owner=Web3Capital Documentation Steward; assigned approvers (not approval evidence)=Stephen.\nRead-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.\nDeploy by boundary, not by domain: Deployment units are divided by trust level, resource needs and how they recover after a failure, not by how many domains or pages there are. The brand website, the customer application, the staff operations application, and the status page and documentation are separate entry points; the brand website carries only public information and cannot reach customer business data.", "title": "Deployment and trust boundaries", "version": "0.1.0", "visibility": "PUBLIC" }, { "anchor": "authenticated-connections", "approvers": [ "Stephen" ], "authorization_scope": "PUBLIC_INFORMATION", "availability_state": "NOT_AVAILABLE", "canonical_authority": "SRC-ARCHITECTURE-ATLAS-V2-2", "canonical_url": "/en/architecture/deployment-and-trust-boundaries", "capability_state": "IN_DEVELOPMENT", "chunk_id": "MYRILUM-DOC-ARCH-026@0.1.0:en:GLOBAL:authenticated-connections", "citation_id": "MYRILUM-DOC-ARCH-026@0.1.0:en#authenticated-connections", "command_authority": "NONE", "content_applicability": "SHARED_NEUTRAL", "content_digest": "26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6", "content_maturity": "DRAFTED", "doc_id": "MYRILUM-DOC-ARCH-026", "effective_at": null, "expires_at": null, "freshness_status": "CURRENT", "governance_status": "APPROVED", "last_verified_at": "2026-09-23", "limitations": "Read-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.", "locale": "en", "operational_effect": "NONE", "owner": "Web3Capital Documentation Steward", "product_id": null, "publication_status": "PUBLISHED_GLOBAL", "region": "GLOBAL", "requires_human_gate": true, "review_due_at": "2026-10-23", "safety_class": "INFORMATIONAL", "section_title": "Every connection is authenticated", "source_commit": "6b41cce4496de03c67a501aa94cd41ec6ac0e85a", "source_refs": [ "SRC-ARCHITECTURE-ATLAS-V2-2" ], "text": "Document: Deployment and trust boundaries (MYRILUM-DOC-ARCH-026, version 0.1.0).\nCanonical URL: /en/architecture/deployment-and-trust-boundaries#authenticated-connections. Product: NOT_APPLICABLE.\nRegion: GLOBAL; locale: en; visibility: PUBLIC; publication: PUBLISHED_GLOBAL.\nContent: DRAFTED; governance: APPROVED; freshness: CURRENT.\nReality: IN_DEVELOPMENT; availability: NOT_AVAILABLE; authorization: PUBLIC_INFORMATION.\nAuthority: SRC-ARCHITECTURE-ATLAS-V2-2; source commit: 6b41cce4496de03c67a501aa94cd41ec6ac0e85a; content digest: 26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6.\nEffective: NOT_SET; expires: NOT_SET; verified: 2026-09-23; review due: 2026-10-23.\nSafety: INFORMATIONAL; human gate: true; operational_effect=NONE; command_authority=NONE.\nDocument governance assignment: owner=Web3Capital Documentation Steward; assigned approvers (not approval evidence)=Stephen.\nRead-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.\nEvery connection is authenticated: Two components sitting side by side on a diagram does not mean they can reach each other on the network. Databases are never exposed directly to browsers or to arbitrary agents; every call is authenticated and allowed by resource-level permission.", "title": "Deployment and trust boundaries", "version": "0.1.0", "visibility": "PUBLIC" }, { "anchor": "isolation", "approvers": [ "Stephen" ], "authorization_scope": "PUBLIC_INFORMATION", "availability_state": "NOT_AVAILABLE", "canonical_authority": "SRC-ARCHITECTURE-ATLAS-V2-2", "canonical_url": "/en/architecture/deployment-and-trust-boundaries", "capability_state": "IN_DEVELOPMENT", "chunk_id": "MYRILUM-DOC-ARCH-026@0.1.0:en:GLOBAL:isolation", "citation_id": "MYRILUM-DOC-ARCH-026@0.1.0:en#isolation", "command_authority": "NONE", "content_applicability": "SHARED_NEUTRAL", "content_digest": "26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6", "content_maturity": "DRAFTED", "doc_id": "MYRILUM-DOC-ARCH-026", "effective_at": null, "expires_at": null, "freshness_status": "CURRENT", "governance_status": "APPROVED", "last_verified_at": "2026-09-23", "limitations": "Read-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.", "locale": "en", "operational_effect": "NONE", "owner": "Web3Capital Documentation Steward", "product_id": null, "publication_status": "PUBLISHED_GLOBAL", "region": "GLOBAL", "requires_human_gate": true, "review_due_at": "2026-10-23", "safety_class": "INFORMATIONAL", "section_title": "Customer runs, execution and release are isolated", "source_commit": "6b41cce4496de03c67a501aa94cd41ec6ac0e85a", "source_refs": [ "SRC-ARCHITECTURE-ATLAS-V2-2" ], "text": "Document: Deployment and trust boundaries (MYRILUM-DOC-ARCH-026, version 0.1.0).\nCanonical URL: /en/architecture/deployment-and-trust-boundaries#isolation. Product: NOT_APPLICABLE.\nRegion: GLOBAL; locale: en; visibility: PUBLIC; publication: PUBLISHED_GLOBAL.\nContent: DRAFTED; governance: APPROVED; freshness: CURRENT.\nReality: IN_DEVELOPMENT; availability: NOT_AVAILABLE; authorization: PUBLIC_INFORMATION.\nAuthority: SRC-ARCHITECTURE-ATLAS-V2-2; source commit: 6b41cce4496de03c67a501aa94cd41ec6ac0e85a; content digest: 26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6.\nEffective: NOT_SET; expires: NOT_SET; verified: 2026-09-23; review due: 2026-10-23.\nSafety: INFORMATIONAL; human gate: true; operational_effect=NONE; command_authority=NONE.\nDocument governance assignment: owner=Web3Capital Documentation Steward; assigned approvers (not approval evidence)=Stephen.\nRead-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.\nCustomer runs, execution and release are isolated: Agents and tools run in restricted execution environments where files, network, processes and keys are kept apart, and work never depends on a web request staying open. Customer tasks cannot read production release credentials, and engineering automation never inherits full access to customer data. Keys and configuration are authorized separately by environment, purpose, service and region.", "title": "Deployment and trust boundaries", "version": "0.1.0", "visibility": "PUBLIC" }, { "anchor": "start-simple", "approvers": [ "Stephen" ], "authorization_scope": "PUBLIC_INFORMATION", "availability_state": "NOT_AVAILABLE", "canonical_authority": "SRC-ARCHITECTURE-ATLAS-V2-2", "canonical_url": "/en/architecture/deployment-and-trust-boundaries", "capability_state": "IN_DEVELOPMENT", "chunk_id": "MYRILUM-DOC-ARCH-026@0.1.0:en:GLOBAL:start-simple", "citation_id": "MYRILUM-DOC-ARCH-026@0.1.0:en#start-simple", "command_authority": "NONE", "content_applicability": "SHARED_NEUTRAL", "content_digest": "26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6", "content_maturity": "DRAFTED", "doc_id": "MYRILUM-DOC-ARCH-026", "effective_at": null, "expires_at": null, "freshness_status": "CURRENT", "governance_status": "APPROVED", "last_verified_at": "2026-09-23", "limitations": "Read-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.", "locale": "en", "operational_effect": "NONE", "owner": "Web3Capital Documentation Steward", "product_id": null, "publication_status": "PUBLISHED_GLOBAL", "region": "GLOBAL", "requires_human_gate": true, "review_due_at": "2026-10-23", "safety_class": "INFORMATIONAL", "section_title": "No premature complexity", "source_commit": "6b41cce4496de03c67a501aa94cd41ec6ac0e85a", "source_refs": [ "SRC-ARCHITECTURE-ATLAS-V2-2" ], "text": "Document: Deployment and trust boundaries (MYRILUM-DOC-ARCH-026, version 0.1.0).\nCanonical URL: /en/architecture/deployment-and-trust-boundaries#start-simple. Product: NOT_APPLICABLE.\nRegion: GLOBAL; locale: en; visibility: PUBLIC; publication: PUBLISHED_GLOBAL.\nContent: DRAFTED; governance: APPROVED; freshness: CURRENT.\nReality: IN_DEVELOPMENT; availability: NOT_AVAILABLE; authorization: PUBLIC_INFORMATION.\nAuthority: SRC-ARCHITECTURE-ATLAS-V2-2; source commit: 6b41cce4496de03c67a501aa94cd41ec6ac0e85a; content digest: 26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6.\nEffective: NOT_SET; expires: NOT_SET; verified: 2026-09-23; review due: 2026-10-23.\nSafety: INFORMATIONAL; human gate: true; operational_effect=NONE; command_authority=NONE.\nDocument governance assignment: owner=Web3Capital Documentation Steward; assigned approvers (not approval evidence)=Stephen.\nRead-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.\nNo premature complexity: At the start, having several platforms is no reason to duplicate accounts, payments and databases, and full microservices, active-active multi-cloud or self-built compute are not the default. Business services are organized by domain boundary and one domain never writes another domain's data directly; splitting happens only once measured load calls for it.", "title": "Deployment and trust boundaries", "version": "0.1.0", "visibility": "PUBLIC" }, { "anchor": "measure-first", "approvers": [ "Stephen" ], "authorization_scope": "PUBLIC_INFORMATION", "availability_state": "NOT_AVAILABLE", "canonical_authority": "SRC-ARCHITECTURE-ATLAS-V2-2", "canonical_url": "/en/architecture/deployment-and-trust-boundaries", "capability_state": "IN_DEVELOPMENT", "chunk_id": "MYRILUM-DOC-ARCH-026@0.1.0:en:GLOBAL:measure-first", "citation_id": "MYRILUM-DOC-ARCH-026@0.1.0:en#measure-first", "command_authority": "NONE", "content_applicability": "SHARED_NEUTRAL", "content_digest": "26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6", "content_maturity": "DRAFTED", "doc_id": "MYRILUM-DOC-ARCH-026", "effective_at": null, "expires_at": null, "freshness_status": "CURRENT", "governance_status": "APPROVED", "last_verified_at": "2026-09-23", "limitations": "Read-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.", "locale": "en", "operational_effect": "NONE", "owner": "Web3Capital Documentation Steward", "product_id": null, "publication_status": "PUBLISHED_GLOBAL", "region": "GLOBAL", "requires_human_gate": true, "review_due_at": "2026-10-23", "safety_class": "INFORMATIONAL", "section_title": "Choices are measured first", "source_commit": "6b41cce4496de03c67a501aa94cd41ec6ac0e85a", "source_refs": [ "SRC-ARCHITECTURE-ATLAS-V2-2" ], "text": "Document: Deployment and trust boundaries (MYRILUM-DOC-ARCH-026, version 0.1.0).\nCanonical URL: /en/architecture/deployment-and-trust-boundaries#measure-first. Product: NOT_APPLICABLE.\nRegion: GLOBAL; locale: en; visibility: PUBLIC; publication: PUBLISHED_GLOBAL.\nContent: DRAFTED; governance: APPROVED; freshness: CURRENT.\nReality: IN_DEVELOPMENT; availability: NOT_AVAILABLE; authorization: PUBLIC_INFORMATION.\nAuthority: SRC-ARCHITECTURE-ATLAS-V2-2; source commit: 6b41cce4496de03c67a501aa94cd41ec6ac0e85a; content digest: 26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6.\nEffective: NOT_SET; expires: NOT_SET; verified: 2026-09-23; review due: 2026-10-23.\nSafety: INFORMATIONAL; human gate: true; operational_effect=NONE; command_authority=NONE.\nDocument governance assignment: owner=Web3Capital Documentation Steward; assigned approvers (not approval evidence)=Stephen.\nRead-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.\nChoices are measured first: Backups go through restore drills and reconciliation; observability looks at technical operation, cost and business events together. Which providers are used, which regions host what, and what the capacity and availability targets are all get measured first; the architecture map does not decide them.", "title": "Deployment and trust boundaries", "version": "0.1.0", "visibility": "PUBLIC" }, { "anchor": "source", "approvers": [ "Stephen" ], "authorization_scope": "PUBLIC_INFORMATION", "availability_state": "NOT_AVAILABLE", "canonical_authority": "SRC-ARCHITECTURE-ATLAS-V2-2", "canonical_url": "/en/architecture/deployment-and-trust-boundaries", "capability_state": "IN_DEVELOPMENT", "chunk_id": "MYRILUM-DOC-ARCH-026@0.1.0:en:GLOBAL:source", "citation_id": "MYRILUM-DOC-ARCH-026@0.1.0:en#source", "command_authority": "NONE", "content_applicability": "SHARED_NEUTRAL", "content_digest": "26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6", "content_maturity": "DRAFTED", "doc_id": "MYRILUM-DOC-ARCH-026", "effective_at": null, "expires_at": null, "freshness_status": "CURRENT", "governance_status": "APPROVED", "last_verified_at": "2026-09-23", "limitations": "Read-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.", "locale": "en", "operational_effect": "NONE", "owner": "Web3Capital Documentation Steward", "product_id": null, "publication_status": "PUBLISHED_GLOBAL", "region": "GLOBAL", "requires_human_gate": true, "review_due_at": "2026-10-23", "safety_class": "INFORMATIONAL", "section_title": "Source", "source_commit": "6b41cce4496de03c67a501aa94cd41ec6ac0e85a", "source_refs": [ "SRC-ARCHITECTURE-ATLAS-V2-2" ], "text": "Document: Deployment and trust boundaries (MYRILUM-DOC-ARCH-026, version 0.1.0).\nCanonical URL: /en/architecture/deployment-and-trust-boundaries#source. Product: NOT_APPLICABLE.\nRegion: GLOBAL; locale: en; visibility: PUBLIC; publication: PUBLISHED_GLOBAL.\nContent: DRAFTED; governance: APPROVED; freshness: CURRENT.\nReality: IN_DEVELOPMENT; availability: NOT_AVAILABLE; authorization: PUBLIC_INFORMATION.\nAuthority: SRC-ARCHITECTURE-ATLAS-V2-2; source commit: 6b41cce4496de03c67a501aa94cd41ec6ac0e85a; content digest: 26e1b546d568520fc0d9c1fe54370bd2faae14b5ddd8b04e8ae0260197687df6.\nEffective: NOT_SET; expires: NOT_SET; verified: 2026-09-23; review due: 2026-10-23.\nSafety: INFORMATIONAL; human gate: true; operational_effect=NONE; command_authority=NONE.\nDocument governance assignment: owner=Web3Capital Documentation Steward; assigned approvers (not approval evidence)=Stephen.\nRead-only documentation projection. It grants no command authority and cannot authorize or perform any real-world action.\nSource: This page follows A26 of the MYRILUM architecture map v2.2. Under the public boundary it publishes principles only and carries no diagram. Related: “Unified experience and domain entry”; “Identity, authorization and access decisions”; “Regions, disaster recovery and exit”.", "title": "Deployment and trust boundaries", "version": "0.1.0", "visibility": "PUBLIC" } ]