Administration Aggregates¶

Why This Exists¶

This document defines aggregate boundaries for the Administration Domain.

Owner¶

The owner is the Chief Product Officer and Enterprise Architect.

Business Value¶

Aggregate boundaries keep platform configuration, feature flags, support cases, audit reviews, policy configuration, and governance workflows consistent and auditable.

Aggregate Map¶

flowchart TD
    Config[Platform Configuration Aggregate]
    Feature[Feature Flag Aggregate]
    Support[Support Case Aggregate]
    Tenant[Tenant Administration View Aggregate]
    Policy[Policy Configuration Aggregate]
    Audit[Audit Review Aggregate]
    Governance[Operational Governance Aggregate]
    Integration[Integration Configuration Aggregate]
    Dashboard[Admin Dashboard Aggregate]

    Config --> Feature
    Config --> Policy
    Support --> Tenant
    Audit --> Governance
    Policy --> Governance
    Integration --> Config
    Governance --> Dashboard

Platform Configuration Aggregate¶

The Platform Configuration aggregate owns platform-level settings, configuration scope, status, effective dates, and change approvals.

Invariants¶

Configuration changes must have scope and reason.
Active configuration must be versioned.
Sensitive configuration changes must be auditable.

Feature Flag Aggregate¶

The Feature Flag aggregate owns flag key, description, rollout state, targeting rules, emergency disable status, and history.

Invariants¶

A feature flag must have an owner and rollout purpose.
Rollout rules must be explicit.
Emergency disable must be auditable.

Support Case Aggregate¶

The Support Case aggregate owns support request, customer context references, status, priority, notes, assigned operator, and resolution.

Invariants¶

Support cases must reference source facts rather than own them.
Cases must have status and priority.
Resolution must be recorded before closure.

Tenant Administration View Aggregate¶

The Tenant Administration View aggregate owns an admin-facing view model and support context for a tenant.

Invariants¶

Tenant views must reference OrganizationId.
Tenant views must not own organization business profile facts.
Access to tenant administration views must be authorized by Identity.

Policy Configuration Aggregate¶

The Policy Configuration aggregate owns administrative records that configure policies in other domains or platform controls.

Invariants¶

Policy configuration must identify enforcement domain.
Administration configures inputs; enforcement remains with owning domain.
Policy configuration changes must be versioned.

Audit Review Aggregate¶

The Audit Review aggregate owns review workflow over audit events, evidence references, findings, status, and decision.

Invariants¶

Audit review must preserve source evidence references.
Review cannot mutate original audit events.
Findings must be attributed to reviewer or system process.

Operational Governance Aggregate¶

The Operational Governance aggregate owns governance decisions, exceptions, approvals, and administrative controls.

Invariants¶

Governance decisions must have reason and authority.
Exceptions must have expiry or review date.
Governance records must be auditable.