# Architecture Decision Records

Every significant design decision is recorded as an ADR under
[`docs/adr/`](https://github.com/duncatzat/vigils/tree/main/docs/adr). Each ADR and its
implementation were reviewed before merge.

| # | Title |
|---|---|
| [0001](https://github.com/duncatzat/vigils/blob/main/docs/adr/0001-action-control-plane.md) | Action control plane |
| [0002](https://github.com/duncatzat/vigils/blob/main/docs/adr/0002-audit-ledger.md) | Audit ledger + hash chain (revised: v2) |
| [0003](https://github.com/duncatzat/vigils/blob/main/docs/adr/0003-firewall-and-approval.md) | Firewall + approval queue |
| [0004](https://github.com/duncatzat/vigils/blob/main/docs/adr/0004-mcp-hub-and-outbox.md) | MCP hub + outbox |
| [0005](https://github.com/duncatzat/vigils/blob/main/docs/adr/0005-descriptor-pinning-and-drift.md) | Descriptor pinning + drift |
| [0006](https://github.com/duncatzat/vigils/blob/main/docs/adr/0006-secret-lease-broker.md) | Secret lease broker |
| [0007](https://github.com/duncatzat/vigils/blob/main/docs/adr/0007-sandbox-runner.md) | Sandbox runner (Wasm + native + Landlock) |
| [0008](https://github.com/duncatzat/vigils/blob/main/docs/adr/0008-desktop-ui.md) | Desktop UI protocol |
| [0009](https://github.com/duncatzat/vigils/blob/main/docs/adr/0009-browser-extension-mvp.md) | Browser extension + native host |
| [0010](https://github.com/duncatzat/vigils/blob/main/docs/adr/0010-http-mcp-auth.md) | HTTP MCP auth |
| [0011](https://github.com/duncatzat/vigils/blob/main/docs/adr/0011-http-transport-and-jwks.md) | HTTP transport + JWKS |
| [0012](https://github.com/duncatzat/vigils/blob/main/docs/adr/0012-model-distribution.md) | Model distribution |
| [0013](https://github.com/duncatzat/vigils/blob/main/docs/adr/0013-hardfp-model-merge.md) | Hard × model merge |
| [0014](https://github.com/duncatzat/vigils/blob/main/docs/adr/0014-tauri-embed-hub.md) | Tauri-embedded Hub |
| [0015](https://github.com/duncatzat/vigils/blob/main/docs/adr/0015-sdk-boundary.md) | SDK boundary |
| [0016](https://github.com/duncatzat/vigils/blob/main/docs/adr/0016-performance-gate.md) | Performance gate |
| [0017](https://github.com/duncatzat/vigils/blob/main/docs/adr/0017-model-descriptor-design.md) | Model descriptor design |
| [0018](https://github.com/duncatzat/vigils/blob/main/docs/adr/0018-vigil-runner-types-split.md) | `vigil-runner-types` split |
| [0019](https://github.com/duncatzat/vigils/blob/main/docs/adr/0019-audit-advisories-policy.md) | Audit advisories policy |
