notandClaude Opus 5.5 84cea6267e docs(arch): ADR-0035 — publish the stack through the existing labs Caddy (closes #177) ...

Records the decision #177 asked for, the other way round: the hypervisor has no
inbound path and the labs Caddy already holds 80/443 and the wildcard cert, so
the portals go through it over a reverse SSH tunnel instead of an in-cluster
edge. Covers keycloakUrl, KC_PROXY_HEADERS and the optional demo OTP autofill.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-25 15:05:38 +02:00

..

fds

docs(architecture): import the FDS architecture decisions from the lab repo (closes #159) (#160)

2026-09-03 12:35:01 +00:00

adr-0001-loose-coupling.md

docs: MkDocs scaffold + ADR-0001 + README quickstart (closes #32) (#39)

2026-06-03 12:13:32 +00:00

adr-0002-catalogus-design.md

feat(infra): seed BIG catalogus + JWT client for OpenZaak (refs #2) (#41)

2026-06-03 13:42:44 +00:00

adr-0003-default-fill.md

feat(acl): ACL skeleton — OpenZaak default-fill (refs #5) (#45)

2026-06-04 07:50:45 +00:00

adr-0004-bdd-framework.md

test(acl): BDD acceptance scenario for opening a zaak (closes #5) (#49)

2026-06-08 11:25:26 +00:00

adr-0005-mutation-testing.md

arch(acl): ADR-0005 adopt Stryker.NET for mutation testing (refs #47)

2026-06-25 14:59:41 +02:00

adr-0006-integration-test-provisioning.md

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

adr-0007-notification-wiring.md

refactor(ci): one verify-stack stage for all live-stack checks (closes #58) (refs #46 #56)

2026-06-29 16:48:38 +02:00

adr-0008-read-projection-store.md

docs(arch): ADR-0008 read projection store + demo note for the event path (refs #7)

2026-06-30 15:11:36 +02:00

adr-0009-external-task-job-worker.md

arch(domain): ADR-0009 external-task job-worker pattern (refs #6, #60)

2026-06-30 16:51:40 +02:00

adr-0010-bff-oidc.md

arch(bff): ADR-0010 BFF OIDC validation + downstream boundaries (refs #8, #63)

2026-07-01 10:51:59 +02:00

adr-0011-approval-status-flow.md

S-09b: Approval flow — temp admin endpoint + status transition to projection (#77)

2026-07-14 09:04:57 +00:00

adr-0012-citizen-reference-correlation.md

feat(#78): one citizen reference across self-service and the openbaar register (#79)

2026-07-14 14:01:49 +00:00

adr-0013-behandel-portal-wiring.md

feat(#13): S-12c-1 — behandel BFF auth + werkbak (ADR-0013) (#85)

2026-07-15 09:54:01 +00:00

adr-0014-withdrawal-cancels-the-process.md

feat(domain): withdrawal cancels the registratie process (S-11b, refs #12) (#89)

2026-07-16 11:09:28 +00:00

adr-0015-beoordeling-escalation.md

feat(workflow): beoordeling escalation to teamlead after 14 days (S-14, closes #15) (#99)

2026-07-17 09:45:36 +00:00

adr-0016-diploma-eligibility-dmn.md

feat(workflow): diploma-eligibility DMN routes foreign diplomas via CBGV-advies (S-13, closes #14) (#101)

2026-07-20 07:26:52 +00:00

adr-0017-document-wait-timeout-cancellation.md

feat(workflow): document-wait task + 30-day timeout cancellation (S-10a, closes #102) (#105)

2026-07-20 09:42:02 +00:00

adr-0018-diploma-upload-via-acl-documenten.md

feat(acl): diploma upload stored in the ZGW Documenten API (S-10b, closes #103) (#108)

2026-07-21 12:15:33 +00:00

adr-0019-zaak-cancellation-on-timeout.md

feat(acl,domain): cancel the ZGW zaak on document-timeout expiry (S-10c, closes #106) (#109)

2026-07-21 13:58:15 +00:00

adr-0020-local-stack-self-seeds.md

fix(infra): docker-compose.local self-seeds zaaktype, DMN + NRC abonnement (closes #110) (#114)

2026-07-22 12:44:29 +00:00

adr-0021-acl-resolves-zaaktype-by-identificatie.md

feat(acl): resolve the zaaktype by identificatie, not a pinned URL (S-27, closes #113) (#118)

2026-07-22 14:49:25 +00:00

adr-0022-quartz-scheduler.md

feat(domain): herregistratie reminder sweep on a Quartz cron (S-17, closes #18) (#121)

2026-07-23 10:31:56 +00:00

adr-0023-observability-stack.md

fix(observability): stop single-binary Tempo evicting its only ingester (closes #156) (#157)

2026-09-01 08:31:36 +00:00

adr-0024-prometheus-aspnetcore-exporter.md

feat(obs): Prometheus metrics on /metrics + golden-signal Grafana dashboard (closes #124) (#129)

2026-07-24 08:31:41 +00:00

adr-0025-bff-reads-catalogus-via-acl.md

feat(portal-beheer): beheer portal + read-only catalogus viewer (closes #130) (#133)

2026-07-24 11:08:17 +00:00

adr-0026-mutable-default-fill-store.md

feat(portal-beheer): ACL default-fill configuration editor (closes #131) (#138)

2026-07-24 14:22:22 +00:00

adr-0027-registerrecord-objecttype-schema.md

S-18c · RegisterRecord objecttype defined + registered (closes #141) (#146)

2026-07-27 15:14:16 +00:00

adr-0028-objecten-holds-the-register.md

feat: read projection sourced from the register in Objecten (closes #153) (#155)

2026-09-01 07:26:33 +00:00

adr-0029-objecten-publishes-to-nrc.md

feat(infra): Objecten publishes register events to NRC (closes #152) (#154)

2026-08-28 10:11:54 +00:00

adr-0030-projection-sourced-from-the-register.md

feat: read projection sourced from the register in Objecten (closes #153) (#155)

2026-09-01 07:26:33 +00:00

adr-0031-mfa-on-the-medewerker-realm.md

S-15c · Enforce MFA on the medewerker (Keycloak) realm (#158)

2026-09-04 08:27:52 +00:00

adr-0032-werkbak-live-refresh.md

S-24/#25 · Helm chart + Kubernetes deployment, and Caddy for the portals (#166) (#167)

2026-09-10 08:53:58 +00:00

adr-0033-kubernetes-via-one-helm-chart.md

ci(k8s): gate the Helm chart in CI + a compose↔chart drift check (closes #168) (#171)

2026-09-18 13:25:24 +00:00

adr-0034-caddy-serves-the-portals.md

S-24/#25 · Helm chart + Kubernetes deployment, and Caddy for the portals (#166) (#167)

2026-09-10 08:53:58 +00:00

adr-0035-public-access-through-the-labs-caddy.md

docs(arch): ADR-0035 — publish the stack through the existing labs Caddy (closes #177)

2026-09-25 15:05:38 +02:00