MOD-PFM-OPS

Operational Records Design

How this module will be built: 68 design artifacts, by kind. Design makes the technical choices once, reviewably, and citable by everything they constrain.

35Draft
33Proposed

Domain Objects 4

DOM-PFM-OPS-001Background JobDraft
DOM-PFM-OPS-002Record Activity EventDraft
DOM-PFM-OPS-003LicenceDraft
DOM-PFM-OPS-004Workspace ApplicationDraft

State Models 6

Workflows 17

Service Contracts 3

Screen Contracts 5

Decision Records 17

ADR-PFM-OPS-001Execution, record and meaning of a job have three ownersProposed
ADR-PFM-OPS-002A job is recorded with its business change and started after the commitProposed
ADR-PFM-OPS-003A job kind declares its failure consequence once, applied from both settlement pathsProposed
ADR-PFM-OPS-004Requester notices favour at-least-once delivery over strict once-onlyProposed
ADR-PFM-OPS-005Customer, workspace and Rhythm HQ monitors are separate declarations of one readProposed
ADR-PFM-OPS-006Other services’ jobs are read through published views, read-onlyProposed
ADR-PFM-OPS-007Record activity is an append-only, workspace-isolated store separate from the security historyProposed
ADR-PFM-OPS-008A visit’s identity is minted by the console and its attribution by the serverProposed
ADR-PFM-OPS-009Recently Viewed lists are answered by the query layer, not by the activity storeProposed
ADR-PFM-OPS-010Licence overrides are revoked, never edited, and a withhold beats everythingProposed
ADR-PFM-OPS-011A licensing decision commits first and later steps never undo itProposed
ADR-PFM-OPS-012A company’s contract copy is replaced whole after a complete read, or not at allProposed
ADR-PFM-OPS-013Availability is licence and readiness together, computed once and enforced by the dispatcherProposed
ADR-PFM-OPS-014Licensing records carry no row-level policy; staff-only routes keep them privateProposed
ADR-PFM-OPS-015The module’s records carry no custom fieldsProposed
ADR-PFM-OPS-016No operation of this module is published to SubmissionsProposed
ADR-PFM-OPS-017The commercial source is read-only and off until its key exists; the nightly read is authoritativeProposed

Domain Objects 4

State Models 6

Workflows 17

Service Contracts 3

Screen Contracts 5

Decision Records 17

Capability Test Specifications 16