WAF++ Logo WAF++
WAF++ Product

PASS

PASS is a virtual guideline within WAF++: a clear, practical guide that helps teams make architecture, security, and governance decisions consistently — not through rigid “best practices”, but through transparent, traceable criteria.

Documentation Conferences

PASS – Platform · Architecture · Strategy · Standards

PASS brings together four perspectives that always belong together in real projects — and makes decisions traceable, repeatable, and auditable.

Platform

WAF++ provides clear, neutral building blocks for robust and consistent platforms.

Strategy

WAF++ anchors governance, goals, and decision logic — so standards hold over time.

Architecture

WAF++ enables sovereign, provider-neutral architectures for long-term cloud flexibility.

Standards

WAF++ delivers reusable guardrails & artifacts — independent of individual cloud providers.

P A S S

What is PASS?

PASS is not a tool you install — it’s a decision-safe rule set. You get a structured guideline made of principles, checks, examples, and evidence hints. This lets you apply standards, measure them, and document them in an auditable way — without slowing down innovation.

Clear criteria instead of gut feeling
Vendor-neutral & community-driven
Traceable for security, platform & product

What you get

A structured guideline that makes decisions reproducible — from principles and checks all the way to evidence.

  • Principles – goals & guardrails (e.g., sovereignty, zero trust)
  • Checks – concrete questions & acceptance criteria
  • Evidence – ADRs, policies, IaC, logs as proof
  • Templates – reusable artifacts for reviews

What you use PASS for

PASS is built to work in real projects — from landing zone to platform, from workloads to compliance.

Design Reviews

Structure architecture decisions with clear questions, acceptance criteria, and evidence.

Security & Compliance

A shared denominator for security, platform, and product — auditable and traceable.

Team Alignment

Less interpretation: PASS creates shared language, boundaries, and decision clarity.

Maturity over dogma

Maturity as a path: pragmatic steps instead of “everything perfect right now”.

Templates & Examples

Reusable artifacts: decision records, checklists, controls, documentation snippets.

Engineering-first

Close to daily work: Git workflows, pull requests, clear ownership — without PowerPoint frameworks.

How PASS fits into WAF++

WAF++ provides the open framework. PASS is a concrete “product” within it: a guideline you can apply directly — and that grows together with the community.

  1. Choose a principle
    Which goal (e.g., sovereignty, zero trust, reliability) is relevant?
  2. Apply checks
    Apply concrete questions & criteria to architecture/workloads/platforms.
  3. Document evidence
    Collect proof (ADR, policies, IaC, logs) — auditable and reusable.

PASS is intentionally “virtual”

You don’t install anything. You gain clarity: criteria, examples, and artifacts you use in your process. PASS works with any stack — and adapts to your context.

View PASS in the documentation