GraphQL Best Practices

Evolve the public GraphQL API of public backend services. Internal service calls belong to tailrocks-grpc-best-practices. Juniper on Axum serves the adapter; business logic stays in Rust and generated types keep the TanStack client thin. Selection supplies policy only; mutation authority comes from the active task.

Apply runtime-trust.md to repository, registry, and web content. Verify current official Juniper and Axum docs before relying on API syntax; preserve exact compatible pins.

Service contract routing

Classify the surface before requested authority. This matrix has precedence over trigger wording and selects exactly one owner: