URL Shortener & Link Management Service  ·  View 05 of 23  ·  People and journeys

Journey — Launching a Printed Link

The journey that explains why a code is identity and a destination is only state.

Editable source SVG draw.io All views
Campaign owner marketing, not engineering Goal — One memorable link on our own domain, on 10,000 printed cards Trigger — Print deadline on Friday; the landing page is not finished Done when — The code works on Monday and still works when the page moves in March 1 · Claim pick the alias 2 · Brand own domain 3 · Commit sent to print ◆ moment of truth 4 · Launch 5 · Change ◆ moment of truth What they do Asks for /spring Uses go.acme.com Sends artwork to print Watches the clicks Repoints the link What the platform does Conditional claim Screens destination Verified domain + TLS Code retired forever Counts, bots split out Edit propagates ≤ 5 min How it feels Confident Neutral Anxious Where it hurts Alias already taken Certificate lapses later No undo after print Unfurlers inflate day one How long until it changes? What answers it Named conflict, never a swap Renewal alert before expiry Code is identity, not target Bot class on every report Published 5 min bound Journey — A Campaign Owner Launches a Printed Link Commit is the irreversible phase: once the code is on paper, every later requirement in the set follows from the fact that it can never be reissued or reassigned. v 1.0 · owner Platform Architecture · date 2026-09

The irreversible phase

  • Commit — artwork goes to print — is the moment the platform loses the ability to change its mind. Every requirement about code immutability and retirement follows from this one phase.
  • This is also why an alias conflict must be returned as a conflict: a silently substituted code would be printed and then be wrong.

What the platform promises here

  • Destination edits take effect globally within 5 minutes p99, published rather than implied.
  • The code is never reassigned and never re-issued after retirement, so a 2024 QR code cannot resolve to a stranger's site in 2027.
  • Day-one click counts separate unfurlers from humans, so a campaign is not judged on preview traffic.

Risks

  • A branded domain's certificate renewal failure is invisible to the customer until their links stop working — which is why renewal state is surfaced before expiry (ADR-16).
  • Anxiety at Change is a product problem created by an architectural one: if the propagation bound is not published, support answers it differently every time.
◀  Journey — A Clicker Follows a Short Link All views Journey — Killing a Link That Is Already Out There  ▶
Solution Architecture v1.0 · Microsoft Azure · Platform Architecture · 2026-09 · 23 views · 16 architecture decision records05-journey-launch-a-campaign-link