Technology
Use the simplest architecture that serves the work.
Choose implementation tools for the requirements. Keep applications understandable and their interfaces explicit enough to verify.
Independent responsibilities
Business domains retain their own source of truth. A website or coordinator does not acquire every application's authority.
Explicit contracts
Define how applications validate and exchange minimized information. Keep provider connections and credentials within separately approved scope.
Human-governed decisions
Assistance and automation do not replace consequential human authorization or qualified professional review.