Auditable architecture · Unit 1 of 5

Atlas of boundaries

An auditable architecture lets you trace a responsibility from the interface to the package that implements it. The map doesn't replace the code: it tells you where to start verifying.

Intermediate to senior35 min

By the end, you'll be able to

Follow dependencies between packages
Tell a public contract apart from an internal detail

Understand

An auditable architecture lets you trace a responsibility from the interface to the package that implements it. The map doesn't replace the code: it tells you where to start verifying.

See

Open Atlas of boundaries

Select a package and follow its relationships and primary sources.

Open artifact

Do

Run the practice in your checkout and keep the output as evidence.

Browse the senior reference (source packages)

Verify

Show that you can apply the unit. Progress only advances once you pass the assessment.

Criteria assessed

Locate the owner of boot, capabilities, tools, gates and state.
Back every important claim with a primary source.

Graded assessment

Solve the 3 scenarios. This unit requires 3 of 3 correct answers.

0 attempts

Question 1 of 3doctor confirms the kernel booted and /reports responds over HTTP, but inspect:tools doesn't show GenerateReport. Which boundary should you audit first?

The tool registry and pipeline in tool-runtime, starting with ToolRegistry.The general boot sequence in runtime, because any later absence belongs to the kernel.The event store, because a tool doesn't exist until it leaves a persisted event.

Question 2 of 3A tutorial claims: "Core executes and persists approvals because it defines VerificationResult." What is the most precise architectural correction?

Keep the claim: whoever defines a type necessarily owns all of its execution and persistence.Separate the responsibilities: Core defines the three-state contract; Workflow implements the machinery and Orchestrator/Event Store contribute process and history as the case requires.Move VerificationResult into Academy so the interface and the educational experience share a single owner.

Question 3 of 3A new atlas card says a package "owns authorization," but it only links to the organization's landing page and identifies no interface, manifest or file. How should it be published?

As a verified fact, because the package name makes the responsibility plausible.As a stable internal detail, with no source, so links don't distract the reader.As a pending hypothesis, or not published at all, until it lands on a primary source that backs the claim.

Grading validates answers in this browser; it doesn't certify identity.

Primary sources

getmilpa organization

Content verified: 2026-07-10

By the end, you'll be able to

1Understand

2See

3Do

4Verify

Primary sources

Understand

See

Do

Verify