Kit infrastructure de plateforme

Golden path spec: target users, stack, scaffolding, CI/CD, environments, observability and security defaults, Backstage catalog

Failure model, deadlines, retries with jitter and budgets, circuit breakers, bulkheads, backpressure, criticality-based shedding, degradation, fault tests

Edge API gateway design: routing, token validation, rate-limit hook, filter chain, retry budgets, adaptive concurrency, push connections, staged config

Dynamic config and feature flag service design: config as code, validation, targeting, sticky percentage rollout, host-agent fan-out, kill switches, audit

Distributed rate limiter: token bucket vs window algorithms, atomic Redis scripts, multi-region shares, 429 headers, fail-open

DNS, anycast and steering, edge and shield hierarchy, pull and proactive fill, tag purge, TLS at edge, ISP appliances, cache keys, observability

Distributed scheduler: cron, delayed and one-off jobs, leases and visibility timeouts, fencing, idempotent handlers, retries, DLQ

Durable workflow engine design: event history and replay, deterministic code, activities, timers, task queues, retries, versioning, visibility, history sharding

Outbound webhook platform design: at-least-once delivery, HMAC signing, per-endpoint queues, backoff and circuit breaking, ordering, replay, SSRF protection

Relationship-based authorization service: relation tuples, namespace config, Check/Expand/List/Watch APIs, consistency tokens, caching, sharding, failure modes

OIDC/OAuth 2.0 IdP: code flow with PKCE, token lifecycle, refresh rotation, key rotation and JWKS, sessions, MFA and passkeys, recovery, multi-tenant