Architecture Overview

See docs/architecture/system-overview.md, packages/ARCHITECTURE.md, and docs/ADRs/ for current design and ownership.

Summary:

• Runtime: Bun 1.3.14 + TypeScript 7 native compiler + Hono 4
• Data: PostgreSQL 18, row-level security, audit tables, transactional outbox
• Events: NATS JetStream + CloudEvents 1.0 + transactional outbox relay
• Cache: Redis 8 OSS for cache, rate-limit state, and short-lived shared state
• Identity: Keycloak 26 with FAPI 1.0 Advanced and FAPI 2.0 policies
• Gateway: Kong 3.8 with mTLS, rate-limit, correlation ID, and CORS
• Observability: Local Compose uses grafana/otel-lgtm; production Helm keeps Alloy and backends independently deployable
• Deploy: Dagger CI/CD, cosign-signed multi-arch images, Helm on Kubernetes