Platform architecture
Trykatch is a build-time modular monolith. It keeps the security boundary centralized while letting product capabilities remain explicit and replaceable.

The stable kernel
Section titled “The stable kernel”The kernel owns identity and sessions, organization resolution, permission enforcement, PostgreSQL row-level security, audit activity, the transactional outbox, and module validation. A business module can use these services, but cannot replace or bypass them.
The module seam
Section titled “The module seam”Modules contribute backend services, controllers, EF model configuration and migrations, permissions, React routes and navigation, events, workers, and optional assistant tools. A single catalog validates identifiers, dependencies, backend/frontend parity, and enabled state.
The operational path
Section titled “The operational path”Organization-scoped work commits business data and outbox messages together. The worker processes durable messages idempotently. HTTP, database, and worker activity export correlated logs, traces, and metrics through OpenTelemetry.