How architecture manages technical risk and meets regulatory obligations — covering architectural risk analysis, compliance by design, privacy by design, security controls as decisions, operational risk, control points, and demonstrating compliance through architecture.
...Control implemented Owner API Gateway Entry point Unauthenticated access OAuth2 + JWT validation Platform team Service mesh Between services Lateral movement mTLS + RBAC Platform team Data access...