Trykatch platform architecture

Trykatch platform architecture An architecture diagram generated by Archify. People and clients · browser + API consumers · Architecture component People and clients browser + API consumers React workspace · TanStack + owned UI · Architecture component React workspace TanStack + owned UI .NET 10 API · controllers + composition root · Architecture component .NET 10 API controllers + composition root Security kernel · identity + org + RBAC + RLS · non-overridable security boundary Security kernel identity + org + RBAC + RLS Validated module catalog · build-time composition · validated module seam Validated module catalog build-time composition Projects module · reference vertical slice · validated module seam Projects module reference vertical slice Federation module · optional SSO adapter · validated module seam Federation module optional SSO adapter PostgreSQL · identity + platform + app · Architecture component PostgreSQL identity + platform + app Outbox worker · durable async delivery · Architecture component Outbox worker durable async delivery Operations stack · OTel + Grafana + Loki + Tempo · Architecture component Operations stack OTel + Grafana + Loki + Tempo HTTPS same-origin cookie + BFF authenticated request authorized dispatch SET LOCAL + forced RLS EF Core + outbox idempotent poll correlated OTLP logs + traces + metrics non-overridable security boundary validated module seam

Security stays central

  • • Modules cannot replace identity, organization resolution, permission enforcement, or RLS
  • • The runtime database role cannot own tables or bypass row-level security

Modules stay replaceable

  • • Backend and React contributions are explicit, paired, and validated
  • • Projects demonstrates the complete module contract; Federation proves an optional adapter

Operations remain observable

  • • Business changes and outbox delivery share correlation context
  • • Logs, traces, and metrics leave the application through OpenTelemetry