When I practice system design, the part that has always felt a little unsatisfying is that the diagram usually gets the final say.
You can draw a load balancer, put PostgreSQL behind your application servers, add a private subnet, and end up with something that looks perfectly reasonable.
But the diagram itself never proves that PostgreSQL is actually private.
That is the idea I kept coming back to while building Torollo:
What if the diagram was only the intended architecture, and the running system was the thing that decided whether you were right?
