5. Key risks, build-vs-buy, and rejected alternatives

DecisionRecommendationWhy
Workflow execution engineBuild on Oban ProBEAM + Oban covers durable multi-day flows natively; avoids embedding n8n (licensing, tenant isolation) or operating Temporal
Event backbonePostgres transactional event log now; Kafka only on documented triggersTransactional consistency between state and events for free; RabbitMQ rejected (queue, not log); building a distributed log in-house rejected outright
Analytics storeTimescale continuous aggregates now; ClickHouse on documented triggersOne database at v1; reporting behind a repository interface keeps the later swap mechanical
System of recordPostgres - Cassandra and SurrealDB rejectedTransactions, joins, and ecosystem (Oban/pgvector/Timescale/RLS) are load-bearing; alternatives forfeit them for scale or features this product doesn't need
Public API surfaceGraphQL-primary + thin REST facadeOne schema as source of truth; REST facade + webhooks keep long-tail integrators (Zapier-class, suppliers, agencies) low-friction; GraphQL-only rejected for partner-ecosystem friction and query-cost tooling burden
Visual automation canvasBuild (React Flow)Differentiating UX; runtime underneath is Oban
E-signature audit trailBuy (Dropbox Sign/Documenso)Legal defensibility is not a place to innovate
QuickBooks Desktop syncBuy or partner if possibleNotoriously painful; a known company-killer to underestimate
Mobile offline syncBuild carefullyOff-the-shelf sync rarely matches per-tenant custom-field schemas
HiringPlan explicitlyElixir talent is excellent but scarce; recruiting strategy is part of the architecture decision
GenAI strategyLocal purpose-tuned LLM (Apache-2.0/MIT weights preferred) behind an adapter interfaceHedges the unknown future cost/stake of hosted LLM APIs; costs shift from variable API spend to fixed GPU hosting + tuning/eval burden; adapter keeps a hosted-API escape hatch and enables side-by-side evals
Data licensing & retentionNegotiate perpetual rights to appended records before signing enrichment contractsRetention terms on provider exit vary by contract; field-level lineage enables surgical purge either way. Have counsel review - not legal advice
Outreach compliance (TCPA/CAN-SPAM)Cold outreach via mail + ads only; text/email reserved for engaged or consented contacts; send-time DNC checksTexting appended numbers without consent is the classic contractor lawsuit; suppression is architecture, not policy
Lead routing / resaleLegal review before routing or selling leads outside the companyCan trigger state data-broker registration and privacy-policy obligations; provider contracts often prohibit resale of appended data
License driftReview licenses at every major upgradeTerraform, Sentry, RudderStack, Redpanda, and Timescale all moved from open source to source-available in recent years; "was open source when we adopted it" is a live supply-chain risk (see §6)

← ArchitectureLicensing →

AYO & Ryzo Platform - hypothetical product specification and wireframe set, v4.0 (July 2026). Feature inventory derived from public JobNimbus and SumoQuote materials; all screens, names, and figures are illustrative. Back to index