Platform Capabilities
In enterprise software architecture and ToB commercial distribution, Platform Capabilities represent the built-in, deeply modeled, and high-concurrency verified core subsystems of BitzOrcas.Modern.
Under ADR 0203 (Physical Directory Structure) and ADR 0205 (Commercial NuGet Package Distribution Model), BitzOrcas.Modern enforces strict physical boundaries between the pure technical framework base (src/Framework), template-owned platform capabilities (src/Platform), and adopter business domain modules (src/Modules).
1. Architectural Roles & Layering Principles
- High-Cohesion Deep Modules: Platform subsystems expose only minimal, stable public contracts (
*.Contracts), options (Options), and strategy/store ports (Policy / Strategy / Store Port). Business modules are strictly barred from depending directly on internal entities or persistence layers. - Three-Tier Rule Dynamic Resolution: Supports smooth self-healing resolution across “Tenant Customization > Host Platform Baseline > Compile-time Code Fallback”.
- Hybrid Execution & Edge-Cloud Parity: Local TypeScript offline mirror engines deliver 0ms interactive calculations in the browser, while the server-side Native AOT kernel issues authoritative audit vouchers signed with SHA-256 anti-tamper fingerprints.
2. Platform Capabilities Catalog (36 Capabilities)
2.1 Identity, Authorization & Tenancy Governance
| Capability | Scope & Purpose | Architectural Features |
|---|---|---|
| Identity | Login, account lifecycle, session, device, invitation, tenancy | User auth separate from app auth (ADR 0501) |
| Authorization | Permissions, roles, policies, and final decision engine | Unified decision service (ADR 0502) |
| Multitenancy | Tenant resolution, context propagation, isolation, cross-tenant protection | Tenant-aware dynamic validation (ADR 0403) |
| Auditing | Business, access, login, system, and integration audit trails | Auto hooks & storage abstraction (ADR 0402) |
| Risk Control | Risk rules, hits, evaluations, and mitigations | Rule engine and Captcha challenge |
| GDPR | Consent evidence, Subject Access Requests (SAR), deletion orchestration | Lifecycle compliance protection |
2.2 Commercial Distribution, Billing & Licensing
| Capability | Scope & Purpose | Architectural Features |
|---|---|---|
| Catalog | Products, SKUs, pricing schedules, and lifecycle versioning | Domain lifecycle and versioning |
| Platform Billing | Plans, subscriptions, usage meters, invoices, and quota links | Idempotent invoices and webhook callbacks |
| Commercial Distribution | Private package rights, short-lived feed credentials, revocation | Signed package supply chain (ADR 0205) |
| License Management | Runtime license requests, four-eyes review, async signing, revocation | Signed runtime license (ADR 0503) |
| Release Management | Release notes, client versions, staged rollouts, force updates | Client version lifecycle |
2.3 AI Orchestration & LegalTech
| Capability | Scope & Purpose | Architectural Features |
|---|---|---|
| Legal Calculators | 12 statutory legal/tax calculation domains, 3-tier fallback, TS mirror, React 19 workbench | Native AOT pure core + SHA-256 signatures |
| AI Manage | AI Providers, credentials, workspaces, conversations, streaming, models | Reflection-free endpoints (ADR 0103) |
| Legal Connectors | Anti-corruption adapters for legal ecosystems and e-signatures | Unified connector composition |
| Tool Connectors | External connectors for tool invocations (iManage, Crawler, OCR) | External integration boundaries |
| Industry Extensions | Specialized industry capabilities and calculation models | Financial/Auction/HR isolation |
2.4 Content, Collaboration & Messaging
| Capability | Scope & Purpose | Architectural Features |
|---|---|---|
| Files | File metadata, storage ports, chunked upload/download | S3-compatible storage (ADR 0604) |
| Documents | Document body, versioning, collaboration, publishing | Collaborative editing & views |
| Document Structure | Folder templates, node trees, favorites, navigation | Scriban templates & recycle bin |
| Comments | Resource comments, threads, replies, and moderation | Multi-tenant thread lifecycle |
| Chat | Channels, memberships, direct messages, read receipts | Realtime events & paginated read model |
| Tickets | Intake, state transitions, assignments, and SLA | Finite state machine & notifications |
| Website | Sites, pages, columns, and publishing portals | Static publishing & SEO optimization |
| Notifications | Templates, channels, user inbox, delivery receipts | Multi-channel delivery |
| Webhooks | Subscriptions, signing, delivery, retries, dead letters | HMAC secret rotation |
| Announcements | Announcement lifecycle, audience targeting, read facts | Targeted broadcast delivery |
2.5 Data, Automation & Platform Operations
| Capability | Scope & Purpose | Architectural Features |
|---|---|---|
| Workflow | Process definitions, instances, tasks, and approval actions | Self-built workflow engine (ADR 0701, see Workflow Column) |
| Operations | Runtime tasks, background jobs, health checks, ops tools | DB-driven job scheduling (ADR 0107) |
| Ops Extension | Incidents, dead letters, CAP failures, support records | Runtime metrics & failure audits |
| Search | Indexing, querying, rebuilds, and eventual consistency | Search attribute metadata (ADR 0109) |
| Reporting | Report definitions, exports, scheduling, and read models | Dedicated reporting mart & OLAP (ADR 0305) |
| I18n | Languages, string keys, translations, and localization | Cache & translation scopes |
| Menu | Navigation catalog, tree hierarchy, permission binding | Tree visibility & authorization parity |
| Guidance | Onboarding journeys, steps, and user progress tracking | Onboarding state machine |
| Numbering | Concurrency-safe, auditable business document numbers | Counter recovery & multi-segment |
| Master Data | Countries, languages, currencies, holidays, codes | Dictionary cache & seed data (ADR 0602) |
| Platform Services | Platform supporting services and extension overview | 17 connector & delivery overview |
3. Commercial Package Delivery & Business Modules (ADR 0205)
In commercial distribution models, consumer solutions only contain their business modules and composition root:
- Platform capabilities are distributed as signed, private NuGet packages (
BitzOrcas.Platform.*); - Business systems extend platform capabilities via DI, CAP Outbox events, tenant validation strategies, and Store adapters;
- Build new business domain modules under
/src/Modules/{BusinessModule}/, see Business Modules Guide.