Skip to content

Principles

Design Principles

Core design principles and philosophy.

Security First

  • Automatic secret masking in logs and safe_repr()
  • No secrets in plaintext unless explicitly requested
  • Cloud providers override local config by default (secrets win)
  • Full audit trail for compliance

Cloud-Agnostic Core

  • Azure and AWS integrations are optional plugins
  • Core library works without cloud SDKs
  • Graceful degradation if providers unavailable

Deterministic Precedence

Configuration precedence is fixed and documented - no ambiguity.

Enterprise Defaults

  • Validation enabled by default
  • Tracing available for observability
  • Caching enabled for performance
  • Strict mode available for production

Backward Compatibility

  • Old API is fully supported
  • New features are additive
  • No breaking changes

Performance

  • Caching to reduce API calls
  • Circuit breakers for resilience
  • Performance monitoring with SLAs