Architecture decision records

Short records of the decisions that shape ShortList, and why.

• 0001: Append-only status timeline with undo
• 0002: One set of rules for every automatic source
• 0003: Same-origin cookie sessions; tokens only for the extension
• 0004: Field-level AES-256-GCM for sensitive data
• 0005: Explicit proxy trust (TRUST_PROXY)
• 0006: Ask: full-text search and exact queries, no embeddings
• 0007: AI is bring-your-own-key, with cost controls in one place
• 0008: Site adapters read the rendered page only, defensively
• 0009: A built-in error log instead of a hosted tracker
• 0010: The public demo is read-only, not reset nightly