Skip to Content
INTERACTIVE TOPOLOGY GRAPH • ARCHITECTURAL DECISION RECORDS (ADR) • ZERO-TRUST & FINOPS TELEMETRY

Production System Topologies & ADR Explorer

Select one of our live production reference architectures below and click any node in the pipeline to inspect its Architectural Decision Record (ADR), Zero-Trust compliance controls, failover behavior, and monthly FinOps cost allocation.

Active Topology Blueprint • 5 Production Layers

Toxicology Ops™ — High-Compliance Clinical & Laboratory LIS

Zero-trust forensic toxicology platform orchestrating walk-in kiosks, AWS Textract OCR, Cordant HL7/REST lab feeds, and raw ZPL thermal barcode printing.

Actual FinOps Run-Rate
$540 / mo
Legacy SaaS Equivalent
$6,800 / mo
Measured SLA
99.98%
Click Any Layer to Inspect ADR Data Flow ↓
LAYER 01 • PERIMETER EDGE < 14ms Edge • $38 / mo
Cloudflare Zero-Trust & AWS WAFv2 / ALB Ingress
Cloudflare Proxy • AWS WAFv2 • Application Load Balancer • TLS 1.3
LAYER 02 • STATELESS ERP COMPUTE 85ms P95 • $165 / mo
AWS ECS Fargate — Custom Odoo 17 Toxicology Core
AWS ECS Fargate • Python 3.11 • Odoo 17 Custom Vertical (`toxicology_operations`)
LAYER 03 • AI DOCUMENT & LAB PIPELINE 1.8s Async • $42 / mo
AWS Textract OCR & Cordant / Sentry HL7 Lab Sync
AWS Textract • Boto3 • PDF/Text Parser • Automated MRO Verification
LAYER 04 • HARDWARE EDGE BRIDGE < 250ms Print • $0 / mo (Zero SaaS Tax)
Walk-In Tablet Kiosks & Raw ZPL Thermal Specimen Printing
Zebra ZPL II • WebUSB / Local Print Bridge • FastPass QR Check-In
LAYER 05 • ENCRYPTED DATA PERSISTENCE 2.1ms Query • $295 / mo
AWS RDS PostgreSQL & KMS-Encrypted S3 Forensic Vault
Amazon RDS PostgreSQL • AWS KMS AES-256 • S3 Object Lock
LAYER 01 • PERIMETER EDGE

Cloudflare Zero-Trust & AWS WAFv2 / ALB Ingress

Cloudflare Proxy • AWS WAFv2 • Application Load Balancer • TLS 1.3
Latency / FinOps Share
< 14ms Edge • $38 / mo
Architectural Decision Record (Why We Built It This Way)

Clinical portals face relentless credential-stuffing and bot scraping. Terminating TLS 1.3 at the edge with strict WAF rate-limiting and Turnstile verification keeps malformed traffic from ever waking Fargate compute containers.

Zero-Trust Security & Compliance Controls

Enforced HSTS (max-age=31536000), OWASP Core Rule Set, Geo-IP anomaly filtering, and strict security group lockdown allowing ALB ingress exclusively on internal container ports.

Self-Healing & Failover Resilience

Multi-AZ AWS Application Load Balancer health checks probe `/web/health` every 15 seconds, draining unhealthy tasks transparently with zero dropped donor intake sessions.