diff --git a/docs/architecture.md b/docs/architecture.md
new file mode 100644
index 0000000..5bd78d3
--- /dev/null
+++ b/docs/architecture.md
@@ -0,0 +1,11 @@
+# Client boundary
+
+The Linux client is a Svelte/Tauri control surface for `trixie-server`. It
+renders server-owned state and sends explicit user actions through the shared
+versioned HTTP/WebSocket boundary.
+
+The client never stores Twitch refresh tokens or the administrator password,
+calls Twitch directly, executes plugin code, or treats local UI state as
+authoritative. Local overlay drafts and display preferences are recoverable
+presentation data only; the server remains authoritative for publication,
+authorization, Twitch state, and durable history.