Bounded System Design Packet

Bounded System Design Packet, a learner-facing working resource from the free and open-source Lumyn FDE School.

Back to related lesson

For self-directed implementation practice, use the fictional claims-denial case and the optional technical labs.

Evidence boundary

  • Evidence mode: live field evidence / sanitized retrospective / synthetic practice:
  • Evidence classes used: assertion / observation / policy / measured operations / exact-build test / exercised capability:
  • Intended use or decision:
  • Scope and applicability:
  • Current limitations and prohibited claims:

Vertical slice

  • Workflow boundary: accepted / explicitly provisional technical-spike hypothesis:
  • Authority basis and limitation; a provisional packet cannot authorize implementation or production use:
  • Eligible case and exclusions:
  • Accepted outcome and guardrails—or provisional hypothesis and validation need:
  • Accountable operating owner:
  • Mechanism records:

Domain and state

  • Canonical identities:
  • Domain states and transitions:
  • Invariants trusted software must enforce:
  • Workflow lifecycle:
  • Evidence maturity:
  • Proposal and human disposition:
  • Currency and derived readiness:

Typed dependency graph

From object and revision Relationship type To object and revision Provenance Currentness Owner validation
supports / contests / depends on / supersedes / affects

Graph edges route review and selective propagation. They never grant authority or prove completion.

Components and trust boundaries

Component Responsibility Inputs Outputs Trust boundary Failure behavior

Context and data contract

  • Source systems, authority, and permitted purpose:
  • Label or expected-output authority and adjudication:
  • Preparation and lineage:
  • Version, freshness, representative coverage, and quality checks:
  • Model-visible context:
  • Restricted fields and retention:
  • Missing or contested evidence behavior:
  • Remediation owner and economics:

Tool and effect boundaries

  • Caller identity and tenant:
  • Capability and version:
  • Policy and approval checks:
  • Credentials and egress:
  • Idempotency and concurrency:
  • Source-of-truth readback:

Failure and recovery

Cover malformed model output, timeout, dependency failure, duplicate request, partial effect, concurrent change, stale evidence, failed readback, rollback, disable, and restart recovery.

Telemetry

  • Business outcome and adoption:
  • Model behavior:
  • Software reliability:
  • Safety and authorization:
  • Human review and exception load:
  • Cost and capacity:

Exact release tests

List positive, negative, recovery, migration, isolation, security, evaluation, accessibility, cost, and rollback checks required for the slice.