ADR-0001 — No public cloud, no GitHub

Status: Accepted Date: 2026-03-28 Decision-maker: João Brazão

Context

JB owns multiple operational systems (Gamine, MedVault, JB Brain, CateringAssiste tooling, Gestso ERP) that handle: - Personal health records (RGPD Article 9) - Business operational data of multiple companies - Investment portfolio data - Intellectual property (skills, prompts, models)

The default reflex of "use AWS + GitHub" creates several unacceptable risks: 1. Single platform can change terms, prices, or de-platform 2. Health data on US cloud creates RGPD exposure 3. Source code on a foreign platform creates IP exfiltration risk 4. Multiple regulatory regimes overlap unpredictably

Decision

All production systems run on infrastructure JB owns or rents bare-metal: - One Hostinger VPS (KVM 8) in Paris - One Intel Mac home server for inference/transcription - Forgejo replaces GitHub for source control - Vaultwarden replaces 1Password/Bitwarden Cloud - MinIO replaces S3 - LiteLLM proxy replaces direct OpenAI/Anthropic SDKs

External AI providers (Anthropic, OpenAI, Gemini) are used only through the LiteLLM proxy with strict cost caps, and never for health data.

Consequences

Positive - Full control over data residency - No surprise pricing changes - Single backup strategy across all systems - No vendor de-platforming risk

Negative - JB is responsible for uptime, patching, backups - Single point of failure if VPS dies (mitigated by snapshots + DR plan) - Higher operational burden than SaaS

Trade-offs accepted: the time spent on ops is worth the sovereignty for a multi-business operation.

Supersedes / superseded by

• Nothing. This is foundational.