How this project intentionally tracks BC engineering conventions, design systems, deployment models, and the public platform contract. Auto-generated nightly by a CI check (tools/state-derive/) from _state.json + ADR frontmatter.
The rubric below is project-authored, not an external standard. These rows are scored against a capability catalogue this project wrote for itself — useful as a self-check, not independent certification. Treat it as a starting point for your own review, not as proof of conformance.
12 rows · 12 compliant · ratified by internal decision record
bigeng-01-snake-case-wiresnake_case wire fields — JSON request/response keys are snake_case on the wire
bigeng-02-store-id-in-payloadstore_hash present as payload field, not header-only
bigeng-03-offset-cursor-paginationOffset + cursor pagination, mutually exclusive — bigeng convention #3
bigeng-04-typed-errorsTyped domain ADTs for errors (vs ad-hoc { error: string } shapes)
bigeng-05-principal-envelopeAuth principal envelope {id, type} on requests
bigeng-06-uuid-owned-entitiesUUID for owned entities; integer for legacy BC FKs
bigeng-07-soft-delete-flagSoft-delete via is_deleted INTEGER (vs hard-delete + cascade)
bigeng-08-timestamp-defaultsTIMESTAMP DEFAULT CURRENT_TIMESTAMP on created_at / updated_at columns
bigeng-09-operations-ledgerOperations-table saga ledger (replaces inline cron-driven orchestration)
bigeng-10-scope-entitlementsScope / resource entitlements (per-subscriber, not just store-wide)
bigeng-11-audit-decoratorAudit emission via decorator wrapping (vs inline INSERT INTO events)
bigeng-12-audit-payload-shapeAudit payload shape — target/resource/summary/operation_type + request-scoped MDC
29 ADR-derived capability rows ·26 compliant
adr-0007-uninstall-sweepADR-0007: GDPR-driven uninstall retention sweep (30-day tombstone before hard delete)
adr-0009-tenant-scope-guardsADR-0009: tenant data isolation via store_hash scope guards on every owned-entity read
adr-0011-failed-permanentlyADR-0011: failed_permanently terminal state — scheduler ratchets stuck charges
adr-0014-typed-error-formatADR-0014: typed-error wire format (couples with BigEng convention #4)
adr-0024-per-instance-overridesADR-0024: per-delivery-instance override mutation API (skip / swap_product / reschedule_to)
adr-0028-eligibility-engineADR-0028: eligibility-engine architecture pattern (Epic 26 inclusion + exclusion rules)
adr-0029-marketplace-firstADR-0029: marketplace-first, native-ready posture
adr-0030-bigeng-alignmentADR-0030: BigEng pattern alignment — ratify the 12-convention catalog
ops-ledger-max-attemptsADR-0031: operations.max_attempts column for per-row retry budget
ops-ledger-locked-until-reaperADR-0031: operations.locked_until column + reaper cron
job-configuration-tableADR-0031: job_configuration sidecar table for per-cron per-store config
deprecation-handler-registeredDeprecationRegistry + middleware wired at app boot (ADR-0032)
api-version-namespace-v1All API routes mounted under /api/v1/ prefix (ADR-0032)
deprecation-headers-emit-on-requestDeprecation, Sunset, Link headers emit on deprecated route calls (ADR-0032)
subscription-extensions-tableADR-0033: polymorphic subscription_extensions substrate for Epic 6 extension types
extensions-scheduler-hooksADR-0033: scheduler invokes extension lifecycle hooks before each renewal
processor-adapter-bc-payments-productionADR-0035: BC Payments standard-rail adapter — production branch implemented (PAT mint + method lookup + payments.bigcommerce.com charge; throw at bc-payments.ts:70 replaced)
processor-adapter-bc-payments-webhook-extractionADR-0035: BC Payments stored-instrument extraction at order.created webhook — real BigPay token persisted via GET /v3/customers/{id}/stored-instruments
processor-adapter-stripe-productionADR-0025: Stripe secondary-rail adapter — production branch implemented (PaymentIntent.create with off_session MIT; no pre-existing BC order required)
processor-adapter-stripe-decline-classificationStripe adapter classifies hard vs soft declines via HARD_DECLINE_CODES set; StripeChargeError exposes isHardDecline for scheduler dunning logic
8 of 93 ADRs reference BC platform patterns directly
ADR-0062Gdpr Data Subject Rights And Processor AgreementsADR-0061Stride Payment Flow Threat ModelADR-0060Pci Scope Saq A BoundaryADR-0032Deprecation Handler And VersioningADR-0030Bigeng Pattern AlignmentADR-0029Marketplace First Native ReadyADR-0022Marketplace Mor ScopeADR-0010Webhook Event EgressThree languages, ratified 2026-05-20: Shell (admin / portal — uses @bc-subscriptions/ui + design-tokens),Storefront (catalyst + svelte surfaces — BC storefront-kit aligned),BigDesign (confined to /prototypes/<name>/* slices). See the decision record for the three-language design contract.
Phase 1: Cloudflare Workers (apps/api) + Cloudflare Pages (admin, portal, storefronts, demos). Phase 2: GCP — Cloud Run + Cloud SQL Postgres + Memorystore + Pub/Sub + Secret Manager (ADR-0030 cloud-agnostic; ADR-0054 Cloud SQL Postgres; dms-self-serve reference pattern).
Marketplace-first, native-ready (ADR-0029). Ships as a marketplace app destination — not a waypoint — with native-graduation as design constraint, not commitment. Marketplace-blocking attestations tracked in /review.
2,665 pages of BC internal engineering docs sit at docs/rag/bc-internal-docs/ — architectural-fit reference for subscription-adjacent domains. See /review/inputs.