https://refplat.org/https://refplat.org/adrs/https://refplat.org/adrs/001-multi-cloud-terragrunt-structure/https://refplat.org/adrs/002-aws-state-storage/https://refplat.org/adrs/003-scp-design-philosophy/https://refplat.org/adrs/004-account-management-strategy/https://refplat.org/adrs/005-ou-hierarchy-design/https://refplat.org/adrs/006-state-bootstrap-pattern/https://refplat.org/adrs/007-iam-role-model/https://refplat.org/adrs/008-cilium-as-cross-cloud-cni/https://refplat.org/adrs/009-eks-component-separation/https://refplat.org/adrs/010-private-eks-api-endpoint/https://refplat.org/adrs/011-tailscale-for-private-cluster-access/https://refplat.org/adrs/012-argocd-sso-via-dex-saml/https://refplat.org/adrs/013-compliance-tier-model/https://refplat.org/adrs/014-kyverno-as-policy-engine/https://refplat.org/adrs/015-cidr-allocation-strategy/https://refplat.org/adrs/016-opentofu-over-terraform/https://refplat.org/adrs/017-gateway-api-over-ingress/https://refplat.org/adrs/018-irsa-for-pod-identity/https://refplat.org/adrs/019-external-secrets-operator/https://refplat.org/adrs/020-ssm-bastion-over-ssh/https://refplat.org/adrs/021-argocd-for-gitops/https://refplat.org/adrs/022-dns-architecture/https://refplat.org/adrs/023-managed-node-groups/https://refplat.org/adrs/024-secrets-management-architecture/https://refplat.org/adrs/025-secret-naming-convention/https://refplat.org/adrs/026-cross-account-secret-isolation/https://refplat.org/adrs/027-hybrid-tenant-isolation-model/https://refplat.org/adrs/028-ecr-cross-account-container-registry/https://refplat.org/adrs/029-preprod-public-ingress-gateway-api/https://refplat.org/adrs/030-route53-subdomain-delegation/https://refplat.org/adrs/031-multi-app-tenant-model/https://refplat.org/adrs/032-pr-preview-environments/https://refplat.org/adrs/033-defer-vcluster-tenant-support/https://refplat.org/adrs/034-transit-gateway-cross-account-connectivity/https://refplat.org/adrs/035-cross-vpc-dns-resolution/https://refplat.org/adrs/036-github-actions-oidc-federation/https://refplat.org/adrs/037-cloudtrail-audit-logging/https://refplat.org/adrs/038-platctl-cli-for-platform-operations/https://refplat.org/adrs/039-per-team-developer-rbac/https://refplat.org/adrs/040-platform-engineer-access-model/https://refplat.org/adrs/041-pod-identity-for-tenant-workloads/https://refplat.org/adrs/042-isolated-build-provenance-slsa-l3/https://refplat.org/adrs/043-self-hosted-observability-stack/https://refplat.org/adrs/044-mimir-durable-multi-tenant-metrics/https://refplat.org/adrs/045-falco-runtime-threat-detection/https://refplat.org/adrs/046-back-stack-for-developer-self-service/https://refplat.org/adrs/047-pod-identity-as-aws-identity-standard/https://refplat.org/adrs/048-federated-per-cluster-crossplane/https://refplat.org/adrs/049-tenant-model-team-tenant-zone/https://refplat.org/adrs/050-shared-build-sign-reusable-workflow/https://refplat.org/adrs/051-backstage-developer-portal/https://refplat.org/adrs/052-centralized-dex-sso-broker/https://refplat.org/adrs/053-identity-and-cross-system-authorization-strategy/https://refplat.org/adrs/054-platform-resilience-and-business-continuity/https://refplat.org/adrs/055-compliance-assurance-and-continuous-control-evidence/https://refplat.org/adrs/056-progressive-delivery-and-safe-rollback/https://refplat.org/adrs/057-service-identity-and-east-west-zero-trust/https://refplat.org/adrs/058-per-cloud-tenant-composition-strategy/https://refplat.org/adrs/059-identity-topology-pluggable-idp-seam/https://refplat.org/adrs/060-tenant-app-hostname-convention/https://refplat.org/adrs/061-tenant-ingress-and-custom-domain-strategy/https://refplat.org/adrs/062-self-service-tenant-provisioning/https://refplat.org/adrs/063-team-as-first-class-git-object/https://refplat.org/adrs/064-backstage-provisioning-visibility/https://refplat.org/adrs/065-self-hosted-github-actions-runners-arc/https://refplat.org/adrs/066-sops-encrypted-config-secrets/https://refplat.org/adrs/067-idp-domain-model/https://refplat.org/adrs/068-product-scoped-and-cross-team-access-model/https://refplat.org/adrs/069-delivery-source-of-truth-product-environment/https://refplat.org/adrs/070-tenant-app-config-and-secrets/https://refplat.org/adrs/071-digest-promotion-via-control-plane/https://refplat.org/adrs/072-app-repo-naming-and-team-ownership/https://refplat.org/adrs/073-self-service-cloud-resources/https://refplat.org/adrs/074-agentic-workloads-platform/https://refplat.org/adrs/075-resource-agent/https://refplat.org/adrs/076-agent-observability/https://refplat.org/adrs/077-application-instrumentation-strategy/https://refplat.org/adrs/078-cluster-elasticity-karpenter/https://refplat.org/adrs/079-cloud-resource-monitoring-scope/https://refplat.org/adrs/080-triage-copilot/https://refplat.org/adrs/081-platform-service-delivery/https://refplat.org/adrs/082-platform-agent-runtime-xagent/https://refplat.org/adrs/083-provider-version-constraint-standardization/https://refplat.org/adrs/084-platform-identity-directory-and-owner-resolution/https://refplat.org/adrs/085-workload-availability-graceful-disruption-defaults/https://refplat.org/adrs/086-autonomous-agent-access/https://refplat.org/adrs/087-keycloak-admin-plane-hardening/https://refplat.org/adrs/088-temporary-power-activation/https://refplat.org/adrs/089-governance-registry-topology/https://refplat.org/adrs/090-governance-identity-model/https://refplat.org/adrs/091-cost-guardrails/https://refplat.org/adrs/092-platform-finops-practice/https://refplat.org/adrs/093-descheduler-node-rebalancing/https://refplat.org/adrs/094-secret-rotation-strategy/https://refplat.org/adrs/095-dast-dynamic-application-security-testing/https://refplat.org/adrs/096-web-application-firewall-edge-first/https://refplat.org/adrs/097-techdocs-for-the-learning-portal/https://refplat.org/adrs/098-package-registry-codeartifact/https://refplat.org/adrs/099-feature-flags-platform-service/https://refplat.org/adrs/100-observability-instrumentation-and-otlp-convention/https://refplat.org/adrs/101-service-grant-cross-team-network-capability/https://refplat.org/adrs/103-slo-materialization-architecture/https://refplat.org/adrs/104-cluster-consistent-tenancy/https://refplat.org/agentic/https://refplat.org/agentic/deep-dive-autonomy-and-evaluation/https://refplat.org/agentic/deep-dive-bounding-the-agent/https://refplat.org/agentic/deep-dive-the-triage-copilot/https://refplat.org/agentic/deep-dive-the-xagent-runtime/https://refplat.org/agentic/orientation/https://refplat.org/agentic/reference/https://refplat.org/compliance/https://refplat.org/compliance/orientation/https://refplat.org/compliance/reference/https://refplat.org/cost/https://refplat.org/cost/deep-dive-inform-the-two-meters/https://refplat.org/cost/deep-dive-operate-guardrails-and-the-practice/https://refplat.org/cost/deep-dive-optimize-the-cost-levers/https://refplat.org/cost/orientation/https://refplat.org/cost/reference/https://refplat.org/delivery/https://refplat.org/delivery/orientation/https://refplat.org/delivery/reference/https://refplat.org/developer-experience/https://refplat.org/developer-experience/deep-dive-the-backstage-portal/https://refplat.org/developer-experience/deep-dive-the-scaffolder-golden-paths/https://refplat.org/developer-experience/orientation/https://refplat.org/developer-experience/reference/https://refplat.org/domain-model/https://refplat.org/domain-model/orientation/https://refplat.org/domain-model/reference/https://refplat.org/environment-api/https://refplat.org/environment-api/cheatsheet/https://refplat.org/environment-api/deep-dive-composition-rendering/https://refplat.org/environment-api/orientation/https://refplat.org/environment-api/reference/https://refplat.org/environment-api/tutorial-render-an-environment/https://refplat.org/foundations/https://refplat.org/foundations/deep-dive-infrastructure-as-code/https://refplat.org/foundations/deep-dive-networking/https://refplat.org/foundations/deep-dive-nodes-scaling-access/https://refplat.org/foundations/deep-dive-the-account-model/https://refplat.org/foundations/deep-dive-the-cluster/https://refplat.org/foundations/orientation/https://refplat.org/foundations/reference/https://refplat.org/glossary/https://refplat.org/identity/https://refplat.org/identity/orientation/https://refplat.org/identity/reference/https://refplat.org/observability/https://refplat.org/observability/deep-dive-agent-observability/https://refplat.org/observability/deep-dive-collection-and-instrumentation/https://refplat.org/observability/deep-dive-correlation-and-the-team-experience/https://refplat.org/observability/deep-dive-slos-alerting-and-cost/https://refplat.org/observability/deep-dive-the-stack-and-storage/https://refplat.org/observability/orientation/https://refplat.org/observability/reference/https://refplat.org/operations/https://refplat.org/operations/deep-dive-parking-and-day2/https://refplat.org/operations/deep-dive-platctl-and-the-dag/https://refplat.org/operations/orientation/https://refplat.org/operations/reference/https://refplat.org/policy/https://refplat.org/policy/orientation/https://refplat.org/policy/reference/https://refplat.org/products/https://refplat.org/products/how-to-onboard-a-product/https://refplat.org/products/orientation/https://refplat.org/products/reference/https://refplat.org/runtime-security/https://refplat.org/runtime-security/deep-dive-east-west-zero-trust/https://refplat.org/runtime-security/deep-dive-falco/https://refplat.org/runtime-security/orientation/https://refplat.org/runtime-security/reference/https://refplat.org/secrets-config/https://refplat.org/secrets-config/deep-dive-config-in-git/https://refplat.org/secrets-config/deep-dive-rotation/https://refplat.org/secrets-config/deep-dive-runtime-secrets/https://refplat.org/secrets-config/orientation/https://refplat.org/secrets-config/reference/https://refplat.org/self-service-resources/https://refplat.org/self-service-resources/extending-add-an-engine/https://refplat.org/self-service-resources/orientation/https://refplat.org/self-service-resources/reference/https://refplat.org/spine/architecture-at-a-glance/https://refplat.org/spine/how-the-platform-fits/https://refplat.org/spine/life-of-a-deployment/https://refplat.org/spine/life-of-a-request/https://refplat.org/spine/the-security-model/https://refplat.org/spine/why-the-platform-exists/https://refplat.org/supply-chain/https://refplat.org/supply-chain/orientation/https://refplat.org/supply-chain/reference/https://refplat.org/teams/https://refplat.org/teams/how-to-onboard-a-team/https://refplat.org/teams/orientation/https://refplat.org/teams/reference/