# Architect Artefact — Feature: F-002

## SDD Changes
- Added `spec/sdd/components/legacy-config-loader.md`
- Added `spec/sdd/decisions/002-use-local-config-loader-for-legacy-module.md`
- Extended product, tech, and acceptance specs for F-002

## BDD Coverage
- Added `spec/bdd/features/config/legacy-config.feature`
- Coverage target:
  - no tracked secrets in PHP files
  - one shared config helper
  - documented local config setup

## Technical decisions
- Use module-root `bootstrap.php` as one config entry point.
- Use ignored `config/local.php` for real local values.
- Use versioned `config/local.example.php` for safe shape and defaults.
- Share one mysqli helper across web pages and worker.

## Risks found
- Example config will not make app fully runnable until maintainer fills local values.
- Legacy logs remain under web tree for now.

## Next step
- Implement bootstrap and config files.
- Replace inline secrets and URLs in tracked PHP files.
- Run verify and secret scan.