https://tidir.harrymclaren.co.uk/adr/0001-record-architecture-decisionshttps://tidir.harrymclaren.co.uk/adr/0002-preserve-unmapped-telemetry-in-ocsfhttps://tidir.harrymclaren.co.uk/adr/0003-graph-supernode-pruning-and-clustering-boundarieshttps://tidir.harrymclaren.co.uk/adr/0004-defensive-ai-runtime-and-prompt-injection-firewallhttps://tidir.harrymclaren.co.uk/adr/0005-saga-pattern-containment-and-break-glass-protocolhttps://tidir.harrymclaren.co.uk/adr/0006-agent-evaluation-harness-evals-as-codehttps://tidir.harrymclaren.co.uk/adr/0007-continuous-automated-purple-teaming-and-multi-model-consensushttps://tidir.harrymclaren.co.uk/adr/0008-secops-error-budgets-and-chaos-security-engineeringhttps://tidir.harrymclaren.co.uk/adr/0009-bayesian-multi-signal-risk-scoringhttps://tidir.harrymclaren.co.uk/adr/0010-sabsa-business-architecture-and-attribute-profilinghttps://tidir.harrymclaren.co.uk/adr/0011-bipartite-entity-finding-graph-consolidationhttps://tidir.harrymclaren.co.uk/adr/0012-ai-orchestration-runtime-mcp-and-mvp-roadmaphttps://tidir.harrymclaren.co.uk/adr/0013-ambient-deception-fabric-and-canary-anchorshttps://tidir.harrymclaren.co.uk/adr/0014-ai-observability-self-learning-and-slm-judgeshttps://tidir.harrymclaren.co.uk/adr/0015-sandboxed-agent-execution-otlp-convergence-and-ephemeral-identityhttps://tidir.harrymclaren.co.uk/adr/0016-just-in-time-telemetry-elevation-and-ephemeral-forensicshttps://tidir.harrymclaren.co.uk/adr/0017-agent-fleet-control-plane-and-runtime-observabilityhttps://tidir.harrymclaren.co.uk/adr/0018-non-human-identity-lifecycle-and-machine-attestationhttps://tidir.harrymclaren.co.uk/adr/0019-polyglot-detection-as-code-and-native-engine-adaptationhttps://tidir.harrymclaren.co.uk/adr/0020-operator-skill-retention-and-incident-replay-simulatorshttps://tidir.harrymclaren.co.uk/adr/0021-graceful-degradation-automated-fallback-and-continuity-plan-bhttps://tidir.harrymclaren.co.uk/adr/https://tidir.harrymclaren.co.uk/adr/templatehttps://tidir.harrymclaren.co.uk/architecture/00-architectural-invariantshttps://tidir.harrymclaren.co.uk/architecture/01-system-overviewhttps://tidir.harrymclaren.co.uk/architecture/02-capability-modelhttps://tidir.harrymclaren.co.uk/architecture/03-layer-1-data-sourceshttps://tidir.harrymclaren.co.uk/architecture/04-layer-2-pipeline-storage-queryhttps://tidir.harrymclaren.co.uk/architecture/05-cross-cutting-engineering-disciplineshttps://tidir.harrymclaren.co.uk/architecture/06-layer-3-threat-intel-detectionhttps://tidir.harrymclaren.co.uk/architecture/07-layer-4-incident-responsehttps://tidir.harrymclaren.co.uk/architecture/08-user-storieshttps://tidir.harrymclaren.co.uk/architecture/09-threat-modelhttps://tidir.harrymclaren.co.uk/architecture/10-macro-capabilities-and-serviceshttps://tidir.harrymclaren.co.uk/architecture/components/01-threat-intelligencehttps://tidir.harrymclaren.co.uk/architecture/components/02-data-fabric-telemetryhttps://tidir.harrymclaren.co.uk/architecture/components/03-detection-enginehttps://tidir.harrymclaren.co.uk/architecture/components/04-investigation-caseshttps://tidir.harrymclaren.co.uk/architecture/components/05-response-automationhttps://tidir.harrymclaren.co.uk/architecture/components/06-ai-orchestrationhttps://tidir.harrymclaren.co.uk/