ADRs — Security

ADRs primarily tagged with the Security category.

Title	Status	Access	Date
ADR-0020 — Secrets Strategy: Azure Key Vault primary; encrypted vault bundle for bootstrap/CI/DR; Vault optional later	Accepted	Public	2025-10-20
ADR-0301 — Deprecated pfSense Flow-Control Plane	Deprecated	Public	2025-11-30
ADR-0302 — Deprecated Fortigate Edge Firewall Variant	Deprecated	Public	2025-11-30
ADR-0303 — Adopt Trivy for Container Image Vulnerability Scanning in CI/CD	Proposed	Public	2026-02-28
ADR-0502 — Use External Secrets Operator with Azure Key Vault for Application Secrets	Accepted	Public	2025-12-02
ADR-0504 — External Secrets Operator with GCP Secret Manager for On-Prem Platform Workloads	Accepted	Public	2026-03-10