# BoonTrack Technical Documentation

## Architecture Summary
| Component | Technical Implementation | Architectural Boundary |
| :--- | :--- | :--- |
| Backend Core | FastAPI (Python) Containerized | Stateless application layer, REST-based business authority. |
| Tenant Isolation | Application-Level Logical Isolation | Tenant context middleware & SQLAlchemy DI; explicit query filters per tenant_id. |
| Task Queue | Redis + Background Workers | Transactional Outbox pattern preventing race conditions. |
| Messaging Rail | WhatsApp Cloud API (Meta Platform) | Idempotent webhook verification using Redis wamid tracking. |
| Payment Rail | Adapter-Based Provider Orchestration | Dynamic QRIS per order ID; background worker for status reconciliation and auto-expiry. |
| Attribution | Server-Side Meta CAPI Dispatch | Deduplication via order-level event_id; SHA-256 customer data hashing. |
| Identity & Provisioning | Zero-Trust RBAC & Transactional Pipeline | Single-source auth verification, cryptographic credential protection, and atomic tenant provisioning. |

## Detailed Module Documentation
- [System Architecture (docs/architecture.md)](/docs/architecture.md): Core platform topology, stateless FastAPI layer, Redis outbox queue, PostgreSQL persistence, and decoupled Next.js storefront.
- [WhatsApp Cloud API Integration (docs/whatsapp.md)](/docs/whatsapp.md): Official Meta Cloud API connectivity, wamid-based webhook deduplication, and sliding-window CS takeover.
- [Payment & Dynamic QRIS Orchestration (docs/payments.md)](/docs/payments.md): Multi-provider adapter pattern, status reconciliation cron, and automated expiry handling.
- [Server-Side Tracking & Meta CAPI (docs/tracking.md)](/docs/tracking.md): Client-server deduplication, order-level event_id mapping, and SHA-256 payload normalization.
- [Multi-Tenant Boundaries & Isolation (docs/multi-tenant.md)](/docs/multi-tenant.md): Logical tenant isolation via FastAPI dependency injection and scoped queries.