Runtime Architecture
Runtime Selection
Summary
A workload's runtime model is an explicit, justified decision made during design.
Standards
std-arch-runtime-selection-01The runtime model a workload will execute on MUST be an explicit, justified decision made during design.std-arch-runtime-selection-02A workload MUST NOT proceed to implementation before its runtime model is selected and justified against the workload's own characteristics.std-arch-runtime-selection-03A runtime model selected for one workload MUST NOT be assumed suitable for a different workload without independently assessing that workload's characteristics.
Implements These Principles
Platform Capability
Summary
A workload uses only runtime models supported by platform capabilities that the organisation operates or has approved.
Standards
std-arch-platform-capability-01A runtime model requiring a new, unapproved platform capability MUST NOT be adopted until that capability is approved for operational use.
Implements These Principles
Request State
Summary
State required to fulfil a request remains available independently of any service instance.
Standards
std-arch-request-state-01State required to fulfil a request MUST remain available independently of any service instance.std-arch-request-state-02Instance memory and local disk MUST NOT be the sole store for state required to fulfil a request.
Implements These Principles
Serverless & Managed Services
Summary
Serverless or a managed service is selected according to the workload's characteristics.
Standards
std-arch-serverless-managed-services-01Serverless SHOULD be considered for event-driven or highly variable demand, since it scales to zero, is cost-efficient at low or spiky usage, and shifts operational effort to the provider.std-arch-serverless-managed-services-02Serverless SHOULD NOT be used where a workload runs continuously, is cold-start sensitive, needs resources such as a GPU beyond the platform's limits, or retains state within the runtime.std-arch-serverless-managed-services-03A managed service SHOULD be considered where an existing vendor-operated capability, such as a database, queue, or cache, already meets the need, avoiding the cost, effort, and availability risk of building and operating an equivalent.std-arch-serverless-managed-services-04A managed service SHOULD NOT be used where it lacks a specific configuration, version, or extension the workload needs, or where its cost at scale would exceed a self-operated equivalent.std-arch-serverless-managed-services-05Serverless and managed services SHOULD NOT be used where a workload requires strict isolation from other workloads or depends on a protocol, connection, or language runtime version the platform does not natively support.std-arch-serverless-managed-services-06A managed service SHOULD be preferred over a self-operated equivalent where shared infrastructure provides higher utilisation while meeting the workload's requirements.
Related Standards
Implements These Principles
Vendor Coupling
Summary
The vendor coupling a runtime model introduces is identified and weighed against the capability it provides.
Standards
std-arch-vendor-coupling-01Where a candidate runtime model is a managed service or serverless offering, the vendor coupling it introduces MUST be identified and weighed against the capability it provides.std-arch-vendor-coupling-02A runtime model MAY be selected for the cloud-native capability it provides, even where this introduces vendor coupling.std-arch-vendor-coupling-03An application-layer abstraction SHOULD be used to reduce how much a workload depends on a specific vendor's runtime model, easing any future migration.std-arch-vendor-coupling-04An application-layer abstraction introduced to reduce vendor coupling MUST NOT add cost or complexity disproportionate to the vendor coupling it reduces.
Implements These Principles
Data Residency & Sovereignty
Summary
The jurisdictions permitted to store or process a workload's data, and those able to compel access to it, are defined before deployment selection, enforced through infrastructure and configuration, and periodically verified.
Standards
std-arch-data-residency-sovereignty-01The location and cloud provider selected for a workload MUST satisfy any applicable data residency or sovereignty requirement.std-arch-data-residency-sovereignty-02Any data residency or sovereignty requirements applicable to a workload MUST be defined before its deployment location or cloud provider is selected.std-arch-data-residency-sovereignty-03Selection of a workload's location and cloud provider MUST account for every jurisdiction able to compel access to its data, including jurisdictions other than the data's physical storage location.std-arch-data-residency-sovereignty-04Infrastructure and configuration for a workload subject to a data residency or sovereignty requirement MUST keep its data at rest and in processing within the jurisdictions approved for that data.std-arch-data-residency-sovereignty-05The jurisdictions in which a workload's data is actually stored and processed SHOULD be verified periodically through configuration review or automated audit.
Implements These Principles
Cloud Deployment
Summary
A workload's deployment model is an explicit choice between public, private, and micro cloud, based on its requirements.
Standards
std-arch-cloud-deployment-01The choice between public cloud, private cloud, and micro cloud deployment MUST be an explicit decision for a workload, based on its own requirements.std-arch-cloud-deployment-02Public cloud SHOULD be the default deployment model, since it provides the widest access to cloud-native capabilities such as managed services, serverless offerings, and elastic scaling.std-arch-cloud-deployment-03Private or micro cloud MAY be selected where a specific requirement, such as data residency, connectivity, or proximity to a local data source, justifies it.std-arch-cloud-deployment-04Where private cloud deployment is required, a workload MUST use the organisation's approved private cloud platform.std-arch-cloud-deployment-05Micro cloud deployment, meaning small-scale infrastructure deployed close to a workload's point of use, MUST be used only where a workload has a genuine requirement for local execution.std-arch-cloud-deployment-06Where a private or micro cloud deployment lacks a managed service, serverless capability, or scaling behaviour a workload requires, that gap MUST be identified and either addressed through a deliberate hybrid architecture that offloads the requirement to the public cloud, or accepted as a bounded limitation of the deployment.
Implements These Principles
Carbon-Aware Deployment
Summary
A lower-carbon location or cloud provider is preferred where options meet a workload's requirements equally, with provider commitments and reporting considered.
Standards
std-arch-carbon-aware-deployment-01Where multiple locations or cloud providers equally satisfy a workload's technical, legal, data residency, and commercial requirements, the option with the lower carbon-intensity energy source SHOULD be selected.std-arch-carbon-aware-deployment-02Selection of a cloud provider SHOULD account for its published environmental commitments and reporting where available.