r10c is a marketplace platform, and the application entifix was extracted from. Its business is named from the telecom industry's TM Forum maps: eleven domains and their entities — offerings, specifications, parties, orders, payments, settlements — take their names and boundaries from ODA and SID, the same frameworks I planned Tigo's migration on.
Data is split into three planes. The control plane holds parties, access and agreements; the platform plane holds the published catalog and buyers' orders; the tenant plane holds what each vendor authors, one database per organization, reached only through the handle the session resolves. An entity carries no organization id, so no query can leak another tenant's rows by forgetting a filter.
The services are Effect programs over entifix's use cases, on MongoDB and PostgreSQL. A write goes through a transaction facade that locks in Redis and ships its event with it over RabbitMQ; multi-step flows such as the checkout are sagas declared as data, each step told what to undo. Zitadel signs users in; r10c authorizes them and mints its own tokens. It all runs on Kubernetes, with OpenTelemetry traces in Grafana, and every one of its decisions is a record below.