Architecture

Visual + narrative reference for the MGH workspace.

Files

File	What it shows
mgh-workspace.drawio	Global view — apps, repos, CF zones/Workers/Pages/Tunnel/Access/WAF/Email, OCI compartments/VCN/IAM/buckets/OCIR/Email Delivery/VPS, Google Workspace identity, GitHub CI. Snapshot dated 2026-06-06 (Phase 1 applied; Phase 3 Apply A pending).

How to open .drawio

Tool	Path
Web	https://app.diagrams.net/ → File → Open from → Device → pick the file
VS Code	Install extension hediet.vscode-drawio → open the .drawio file directly
Desktop	https://github.com/jgraph/drawio-desktop → File → Open
Export PNG/SVG/PDF	drawio --export --format svg mgh-workspace.drawio (drawio-desktop CLI)

Update cadence

Refresh this snapshot when any of these change:

• A new CF resource type is introduced (e.g., R2, Queues, Durable Objects).
• A new OCI service is provisioned (e.g., Autonomous DB, ARM A1 fleet).
• A new repo joins the org or the rename map changes.
• An ADR materially alters the traffic-flow topology (Tunnel ↔ Worker swap, Pages cutover, etc.).
• Compartment topology changes (new compartment, IAM model shift).

Add a note in the diagram title row with the new date. Do not delete the previous snapshot — version it under mgh-workspace-YYYY-MM-DD.drawio if changes are substantial. The "live" file at mgh-workspace.drawio always reflects current state.