The Ediacaran application is designed using a modular architecture approach, meaning it is built as a collection of smaller, self-contained components (modules). Each module represents a distinct domain of the system and can evolve independently without disrupting the whole application.
The modular structure of the Ediacaran application allows fine-grained control over how each module accesses data, external connections, and execution resources. For example, the storage module can enforce strict access rules so that only authorized modules (like processing) can read or write data, while external-facing modules (like ingestion or visualization) have limited permissions. This reduces the attack surface, helps prevent unauthorized access, and enables better enforcement of security policies such as authentication, authorization, and data isolation.