ADR Master Index
This is the canonical registry for all unresolved and resolved architecture decisions across the rocket telemetry system.
ADR Status Summary
Total ADRs: 9 (5 system-wide + 4 node-scoped) Status: All Proposed (no decisions accepted yet)
Master ADR Tracking Table
| ID | Title | Scope | Status | Owner | Target Date | Decision Type |
|---|---|---|---|---|---|---|
| ADR-001 | TLS Mutual Authentication | System-wide | Proposed | Security/SRE | 2026-04-05 | Security |
| ADR-002 | Schema Governance & Compatibility | System-wide | Proposed | Backend/Integration | 2026-04-08 | Data contract |
| ADR-003 | Clock Authority & Time Sync | System-wide | Proposed | Operations/Hardware | 2026-04-10 | Operational |
| ADR-004 | Degraded-Mode & Failover Policy | System-wide | Proposed | Operations/Reliability | 2026-04-12 | Operational |
| ADR-005 | Per-Target Binding Resolution | System-wide | Proposed | Frontend/MissionPlan | 2026-04-12 | Frontend |
| N-ADR-001 | Schema Validation Strictness | Node-scoped | Proposed | Node firmware lead | 2026-04-03 | Data contract |
| N-ADR-002 | Decoder Backpressure Policy | Node-scoped | Proposed | Node performance lead | 2026-04-05 | Performance |
| N-ADR-003 | GNSS Degradation & Time Authority | Node-scoped | Proposed | Node firmware lead | 2026-04-10 | Operational |
| N-ADR-004 | (Reserved) | Node-scoped | Proposed | Architecture lead | TBD | TBD |
System-Wide ADRs (5)
ADR-001: TLS Mutual Authentication
Status: Proposed
Location: ADR-001-TLS-Mutual-Auth
Originates from: System-Gaps-Deferred#security-and-trust-boundaries
Quick summary: Define mutual TLS, API key management, and credential rotation for node-central communication.
ADR-002: Schema Governance & Compatibility Policy
Status: Proposed
Location: ADR-002-Schema-Governance
Originates from: System-Gaps-Deferred#schema-governance-and-compatibility-policy
Quick summary: Payload schema versioning, backward compatibility guarantees, migration strategy.
ADR-003: Clock Authority & Time Synchronization
Status: Proposed
Location: ADR-003-Clock-Authority
Originates from: System-Gaps-Deferred#time-synchronization-and-clock-authority
Quick summary: GNSS vs. central clock authority, drift tolerance, degradation fallback.
ADR-004: Degraded-Mode & Failover Policy
Status: Proposed
Location: ADR-004-Degraded-Mode-Policy
Originates from: System-Gaps-Deferred#failure-domain-and-degraded-mode-policy
Quick summary: Node behavior when central is down, fallback priorities, operator alert thresholds.
ADR-005: Per-Target Parameter Binding Resolution
Status: Proposed
Location: ADR-005-PerTarget-Binding
Originates from: System-Gaps-Deferred#per-target-binding-fallback-and-resolution
Quick summary: Binding fallback scopes, missing binding handling, operator override capability.
Node-Scoped ADRs (4)
N-ADR-001: Schema Validation Strictness Policy
Status: Proposed
Location: N-ADR-001-SchemaValidation
Originates from: Node-Gaps-Deferred#schema-validation-strictness-policy
Quick summary: Strict vs. lenient field schema validation, allowable overlaps and gaps.
N-ADR-002: Decoder Failure Behavior & Backpressure
Status: Proposed
Location: N-ADR-002-Decoder-Backpressure
Originates from: Node-Gaps-Deferred#decoder-failure-behavior-and-backpressure
Quick summary: Drop policy under decode overload, buffer limits, error thresholds.
N-ADR-003: GNSS Degradation & Timestamp Authority
Status: Proposed
Location: N-ADR-003-GNSS-Degradation
Originates from: Node-Gaps-Deferred#timestamp-authority-during-gnss-degradation
Quick summary: Fallback clock hierarchy, drift tolerance, degraded-flag handling.
N-ADR-004: (Reserved)
Status: Proposed
Location: N-ADR-004-TBD
Quick summary: To be filled in as node design evolves.
ADR Entry Template
Each ADR document should follow this structure:
# ADR-NNN: Title
## Metadata
- **ADR ID**: ADR-NNN
- **Title**: [Decision title]
- **Status**: Proposed | Accepted | Rejected | Superseded
- **Date**: [YYYY-MM-DD]
- **Owner**: [Name/team]
- **Related to**: Section X of Architecture document
## Problem / Context
[Describe the problem statement and context]
## Decision
[State the proposed decision clearly]
## Alternatives Considered
[List at least 2-3 alternatives with brief pros/cons]
## Consequences
- **Positive**: ...
- **Negative**: ...
- **Neutral/Trade-off**: ...
## Implementation Impact
[How would implementation be affected?]
## Validation Plan
[How will we know if this decision was correct?]
## Rollback Plan
[If accepted but later found wrong, how would we revert?]
## Discussion Notes
[Any additional discussion, decision rationale, or context]
---
**Related ADRs**: [other ADR links if applicable]Review Process
- Proposal: ADR created by domain owner as "Proposed"
- Discussion: Team reviews in weekly architecture meeting (or design review)
- Decision: Owner and stakeholders agree or request changes
- Acceptance: ADR changed to "Accepted", linked from architecture documents
- Implementation: Development team uses accepted ADR as guide
- Closure: If superseded, note replacement ADR and archive old one
Review Cadence
- All "Proposed" ADRs reviewed at least weekly
- ADRs in "Proposed" state >30 days must be escalated
- Accepted ADRs reviewed during architecture quarterly reviews
Navigation: Return to Docs Home for full navigation by audience.
Control Plane and Data Plane
This document defines the transport split between control and telemetry paths, plus policy rules for TM-over-IP in the rocket telemetry system.
ADR-001: TLS Mutual Authentication
Decision record for TLS mutual authentication between node and central, covering bootstrap, rotation, and fallback.