ProficientNowTechRFCs
RFC Standards/RFC Kinds/Architecture/RFC RFCSTD 0002

Appendix A: Glossary

RFC-RFCSTD-0002                                                  Appendix A
Category: Standards Track                                         Glossary

Appendix A: Glossary

← Examples | Index | Next →


Term Definitions

Architecture RFC

An RFC of Kind: Architecture that describes system design conceptually without implementation details. Architecture RFCs focus on what a system does and why, not how it is implemented.

Authority Domain

A bounded context within which a specific system or component holds decision-making authority. In a multi-system architecture, different authority domains may govern different aspects:

Example DomainAuthority
Enterprise IdentityAzure AD
Platform IdentityKeycloak
Secret ManagementHashiCorp Vault

Falsifiable

An invariant is falsifiable if it is possible to determine when it has been violated. A non-falsifiable invariant is not useful because compliance cannot be verified.

FalsifiableExample
Yes"Vault MUST be the sole secret source"
No"The system should be reliable"

Invariant

A rule that MUST always hold true in the architecture. Violation represents a system failure or design violation. Invariants are:

  • Numbered for reference (Invariant 1, 2, 3...)
  • Expressed using RFC 2119 keywords
  • Falsifiable (can detect violation)
  • Accompanied by rationale

Trust Boundary

A point where security context changes and validation MUST occur. Trust boundaries separate different authority domains and require:

  • Authentication at crossing
  • Validation of assertions
  • Audit logging

Component

A building block of the architecture with defined responsibilities, interfaces, and failure modes. Components are the "pieces" that together form the system.

Rationale

Documentation of why design decisions were made, including:

  • Alternatives that were considered
  • Why alternatives were rejected
  • Which invariants alternatives would violate

Abbreviations

AbbreviationExpansion
ADRArchitecture Decision Record
BCPBest Current Practice
CRDCustom Resource Definition
RFCRequest for Comments
TOCTable of Contents

Diagram Index

Architecture RFCs MUST maintain a diagram index. Example:

DiagramLocationDescription
System Overview03-architecture.mdHigh-level system diagram
Trust Boundaries03-architecture.mdSecurity boundary visualization
Authentication Flow05-identity.mdUser authentication sequence
Secret Sync Flow06-secrets.mdVault to Kubernetes sync

End of Appendix A — RFC-RFCSTD-0002

On this page