References

Books

Martin Kleppmann, Designing Data-Intensive Applications. O’Reilly Media, 2017.
Betsy Beyer, Jennifer Petoff, and Niall Richard Murphy, eds., Site Reliability Engineering. O’Reilly Media, 2016.
Martin Fowler, Patterns of Enterprise Application Architecture. Addison-Wesley, 2002.

AWS SaaS Lens — reliability, security, performance, and operational guidance for multi-tenant SaaS.
Microsoft Azure Architecture Center: Multitenant solution architecture — isolation, deployment, and tenant-aware design patterns.
NIST SP 800-207: Zero Trust Architecture — continuous authorization and least-privilege principles relevant to tenant-scoped access.
IETF RFC 7519: JSON Web Token — registered claims and JWT processing requirements.
IETF RFC 8725: JSON Web Token Best Current Practices — security requirements for JWT implementation and claim validation.
Stripe Billing — subscription, usage billing, invoicing, and collection behavior from a production payment provider.
Open Policy Agent documentation — policy evaluation, decision logs, and policy-as-code foundations.