01
Edge
The public side of a platform is a boundary, not a hallway. Only the paths that should be reachable are reachable. Gateways and firewall policy are written as part of the design, and DNS follows the domains the product actually uses.
Traffic is watched where it matters: enough to notice abuse and failure, not so much that the network becomes a second product. Application checks sit behind that boundary. Secrets stay out of the page, the repository, and this description. The internal layout is not published, on purpose.