Skip to content

ADR 0027: Managed Local PostgreSQL Is the Launch Deployment

Context

BooksPlus is desktop-first and PostgreSQL is its primary company data store. Supporting both a locally managed database and arbitrary user-managed servers at launch would multiply installation, upgrade, health, encryption, backup, restore, and support paths before one production path is proven.

Decision

The initial release supports a BooksPlus-managed local PostgreSQL deployment. User-managed local or remote PostgreSQL servers are deferred.

The supported launch path must define and verify:

  • installation and service ownership;
  • database initialization and application connection configuration;
  • schema migration and rollback or recovery behavior;
  • supported PostgreSQL upgrades;
  • startup and ongoing health checks;
  • failure messages and recovery guidance;
  • company-data at-rest protection;
  • encrypted backup creation, export, restore, and recovery-key behavior; and
  • coordinated backup and restore of database records and managed evidence artifacts.

Production use, full-TIN retention, and sensitive W-9 artifact retention remain blocked until the applicable encryption, key handling, backup, restore, and evidence-storage design is accepted and verified.

The customer must retain practical control of backups, recovery material, and company-data export. BooksPlus-managed means the product owns the supported operational path; it does not make the vendor the custodian of customer data.

Deferred decisions

Later truth may define:

  • user-managed PostgreSQL support;
  • remote or shared PostgreSQL deployments;
  • additional multi-user deployment models; and
  • migration between supported deployment profiles.

Consequences

  • Installation and support can qualify one production database path.
  • Infrastructure abstractions must not assume that local deployment is the only future profile.
  • Sensitive-data work cannot use ordinary database access control as a substitute for the required encryption and recovery design.
  • 0002-postgresql-primary-company-data-store.md
  • 0013-encrypted-company-data.md
  • 0030-sensitive-company-data-key-recovery-and-backup-protection.md
  • 0031-company-scoped-postgresql-backup-and-atomic-restore.md
  • ../../contracts/security/backup-security-contract.md
  • ../../contracts/security/company-data-encryption-contract.md
  • ../../contracts/source-document.contract.md