960 B
960 B
Architecture Checklist: AI Tool Layer
Created: 2026-05-19 Feature: 225-ai-tool-layer-architecture
System Architecture
- Does not break any existing core functionality.
- Fits within the described boundaries of ADR-023A and ADR-025.
- Maintains isolation: AI Tool Layer does not directly access database, uses Domain Services.
- Correctly implements Server-side intent routing.
Security (CASL & Audit)
- Every tool function enforces CASL rules using
CaslAbilityFactory. - Audit logs are written for every tool execution.
- ADR-019 check: No
id: numberexists inToolCallResultdata payloads. - No side effects (writes) allowed unless explicitly modeled and protected (Read-only predominantly for V1).
Observability
- All tool layer failures log the exception details to the server logs.
- The
ToolCallResultreturns user-friendly messages for failures without leaking technical details.