Adopt Terraform + hybrid repo structure (new sv0-infrastructure for cross-cutting, existing in-repo modules stay) + Terraform Cloud free tier for state and runners. Design modules so each customer tenant can be stamped out as an independent stack for dedicated-deployment clients.
Serve EU and US clients via per-region MongoDB Atlas clusters with app-side tenant routing instead of a single MongoDB Atlas Global Cluster, with an explicit control-plane / tenant-data-plane split and region-tagged connector API keys to keep all hot-path lookups region-local.
Phased rollout of Infrastructure-as-Code per ADR-019. Four phases, each 1-3 days. Phase 1 is urgent (Cloudflare baseline with health-probe Bypass app); Phases 2-4 queue behind pilot-readiness work.
How a single global app domain (app.securityv0.com) serves tenants in different regions via per-region MongoDB Atlas clusters with application-side tenant routing — with phased deployment topology, request flow walkthroughs, and cost progression.
Pre-client readiness plan for MediaPro pilot (early May 2026). Two architectural decisions (WorkOS auth + MongoDB Atlas) pre-resolve the auth and database P0s found in the original six-perspective adversarial review. Remaining pilot work is grouped by capability across observability, connectors, analyst workflow, and client-facing artifacts.