Container Registry and Software Supply Chain Platform  ·  View 10 of 33  ·  3 · Data

Data Architecture and Storage Zones

Which store is the system of record, which are derived, and what backup actually has to cover.

Editable source SVG draw.io All views
Authoritative — the system of record, never derived from anything else Evidence Attestation Store object lock · 7 y Append-Only Ledger hash chained · 7 y Rekor Log inclusion proofs · 7 y Artifact bytes Layer Blobs MinIO EC 8+4 · 14 TB Manifests content addressed Audit Audit Ledger immudb · 7 y Regional and strongly consistent — one write region per repository Registry metadata Repositories and Manifests PostgreSQL Tag History append rows only Promotion State projection of evidence Derived — may be destroyed and rebuilt Indexes Component Index rebuild ≤ 4 h Findings Store history 3 y Caches Verdict Input Cache BoltDB per cluster Trust Root Cache TUF · 30 d offline Layer Scan Cache Redis · by layer digest Backup Target offline object lock rebuild source RPO ≤ 1 min RPO ≤ 5 min RPO ≤ 15 min Data Architecture — Authoritative, Regional, Derived Data store Security / platform batch event / async Loss of the metadata store or the component index is a rebuild, not a data loss. v 1.0 · owner Data Architecture · date 2026-09

Decisions

  • The evidence store is the system of record; every other store is derived and rebuildable
  • The audit ledger is independent of the registry and append-only, so a registry compromise cannot rewrite the record of it
  • Anything that cannot be reconstructed from evidence and blobs is named explicitly and separately backed up

Recovery targets

  • Evidence store RPO ≤ 1 min, RTO ≤ 30 min
  • Metadata store RPO ≤ 5 min, RTO ≤ 30 min; blob store RPO ≤ 15 min, RTO ≤ 60 min
  • Component index: no RPO — full rebuild ≤ 4 hours, exercised quarterly

Risks

  • The 4-hour rebuild is a claim until it is drilled; an untested rebuild path is a data-loss path
  • Tag history is regional metadata but is audit-relevant; it is backed up separately for that reason
◀  Policy Bundle Lifecycle All views Evidence Data Model  ▶
Solution Architecture v1.0 · Data & AI Global Practice · 2026-09 · 33 views · open-source, on-premises10-data-architecture