Architecture Note: Designing Boundaries and Failure Isolation in a Network Policy Service
An architecture note on isolating policy decisions from data-plane forwarding in a network policy service, with modular components, trust boundaries, health checks, and failure-mode mitigations.