Copied
ADR-ADMIN-009 · apps/admin · Ratified

ADR-ADMIN-009: Strangler-Fig Migrations via Typed Feature Flags with Expiry Governance

Migrate legacy administrative verticals behind typed feature flags enforced by automated CI expiration checks.

← All ADRs · Gate: pnpm run admin:check-governance

Context

Rewriting apps/admin to enforce ASVS L2 security controls in a single big-bang branch would stall delivery and risk production regressions.

Decision

Introduce typed AdminFeatureFlag gates with mandatory owner and expiration metadata. Migrate /users, /verifications, and /audit slices incrementally, then retire the flags once production parity is verified.

Consequences

All 12 overhaul phases completed with zero downtime, and all temporary v2 flags were cleanly retired on schedule.