Internal reference document — depth 5
Service-to-service calls are authenticated with short-lived JWTs signed by the internal CA.
The canary deployment receives 5 % of traffic before full rollout.
Replica synchronisation uses a leader-follower model; reads are served from any node.
The batch job runs at 03:00 UTC and archives records beyond the retention window.
Circuit breaker opens after 50 % error rate over a 10-second sliding window.
Health checks fire every 10 seconds; three failures mark the instance unhealthy.