Architecture Decisions
The load-bearing architectural decisions behind LisaOS, recorded as ADRs.
An architecture decision record (ADR) captures one significant decision: the context that forced it, the choice made, and the consequences accepted. These were backfilled during the full-system audit campaign from decisions the system had already made and proven, so they document why LisaOS is shaped the way it is.
Each ADR follows the same skeleton — Context, Decision, Consequences — and carries a status.
Records
| ADR | Decision | Status |
|---|---|---|
| ADR-0001 | A single OS core behind interchangeable shells | Accepted |
| ADR-0002 | Server-anchored core, local shell for hardware-bound work | Accepted |
| ADR-0003 | Raw-twin write path for gateway write tools | Accepted |
| ADR-0004 | Credential-store-first token resolution, never literals | Accepted |
| ADR-0005 | Fail-closed sanitisation gate for all published docs | Accepted |