URL Shortener & Link Management Service · View 10 of 23 · Structure
Frozen once published
- The redirect URL shape. It lives on printed material the platform cannot see, let alone update.
- The click event schema, because customers build BI on it and a renamed field silently breaks reports rather than failing loudly.
- Both are versioned as public contracts with additive-only change, enforced by a CI contract test (view 19).
Design notes
- Abuse report intake is unauthenticated on purpose: the person best placed to report a phishing link is not a customer.
- The preview endpoint is a product feature, not a debug route — it is what lets a suspicious recipient inspect a destination without visiting it.
- Bulk import is a job API, not a bigger synchronous call, so a 40,000-row campaign import cannot occupy the same capacity as interactive creation.
Omitted
- Per-interface authentication detail, rate limits and pagination are in the API specification rather than on the diagram; view 23 draws the identity path.
