architecture.md

Architecture

Core idea

cf-bot-shield-tf models edge protection through three linked views:

• WAF and rate-limit rules
• threat posture
• Terraform modules

Surface model

• overview
  • rule count, healthy rules, critical threats, blocked-request rate, and recommendation
• rule lane
  • rule purpose, action, affected lane, and explanatory risk framing
• threat posture
  • abuse signal, mitigation, blocked-request rate, false-positive risk, and health
• verification
  • claims about edge protection and infrastructure reuse

Data model

• WafRule
  • name
  • purpose
  • expression
  • action
  • affected lane
  • health
  • explanation
• ThreatSignal
  • lane
  • signal
  • mitigation
  • blocked requests
  • false-positive risk
  • health
  • explanation
• TerraformModule
  • module
  • resources
  • focus
  • health
  • explanation

Commercial value

The point is not just to show security controls. The point is to protect acquisition quality, pricing integrity, and form hygiene with reusable infrastructure instead of ad hoc dashboard edits.