Publaryn ADR Index
This index maps each accepted architecture decision record to the part of the product surface it governs.
| ADR | Title | Primary surface |
|---|---|---|
| 0001 | Control-plane request authentication and ownership derivation | bearer auth, ownership-sensitive writes |
| 0002 | Control-plane scope taxonomy | token scopes and route authorization |
| 0003 | Registered-user organization invitations | invitation model and membership onboarding |
| 0004 | Organization ownership transfer | organization governance |
| 0005 | Package ownership transfer to controlled organizations | package governance |
| 0006 | Control-plane CORS origin allowlist | browser/API boundary |
| 0007 | Package and repository read visibility | visibility and private-read rules |
| 0008 | Control-plane package creation | package identity and repository-derived ownership |
| 0009 | Control-plane release publication and artifact storage | release lifecycle and artifact storage |
| 0010 | npm registry protocol adapter | npm/Bun adapter architecture |
| 0011 | Stateless API runtime and graceful lifecycle | API process model and shutdown |
| 0012 | Team delegated governance | package, repository, and namespace team access |
| 0013 | PyPI Simple API read surface | PyPI read adapter |
| 0014 | PyPI legacy upload bridge | PyPI publish adapter |
| 0015 | PyPI trusted publishing | OIDC trusted publishing |
| 0016 | Cargo alternative registry adapter | Cargo sparse index and publish |
| 0017 | NuGet V3 protocol adapter | NuGet read/write surface |
| 0018 | Redis-backed rate limiting and PostgreSQL-backed background job queue | abuse protection and async work |
| 0019 | OCI Distribution Protocol Adapter | OCI read/write surface |
| 0020 | Maven Deploy Adapter | Maven publish surface |
| 0021 | Composer Publish Adapter | Composer publish surface |
| 0022 | RubyGems Push Adapter | RubyGems publish surface |
How to use this index
- Start with the repository README for the repository baseline.
- Use docs/1.0.md for the current release contract.
- Read the relevant ADRs before changing authentication, visibility, release, governance, or protocol behavior.
1.0 contract map
- Scope, support posture, and release criteria: docs/1.0.md and the repository README
- Repository lifecycle baseline: hosted
public,private,staging, andreleaserepositories in 1.0; proxy and virtual repositories remain post-1.0 lifecycle work - Visibility and actor-aware search: 0007
- Control-plane authentication and scoped writes: 0001 and 0002
- Release lifecycle, quarantine, async work, and operator queue visibility: 0009 and 0018; see docs/operator/job-queue-recovery.md for the
/v1/admin/jobsoperator surface and queue recovery baseline - Organization governance and delegated access: 0003, 0004, 0005, and 0012
- Mounted adapter surfaces: 0010, 0013, 0014, 0015, 0016, 0017, 0019, 0020, 0021, and 0022