I've found rationales and similar to be double-edged in practice. They're immensely valuable to people like yourself who just want to understand the point of a

I've found rationales and similar to be double-edged in practice. They're immensely valuable to people like yourself who just want to understand the point of a question to better implement what its getting at. They're also fodder for people whose primary interest lies in finding ways to undermine the goals. Writing things like this, with clear requirements and no justifications, is what I do when I expect people will try and use explanations to weasel out of requirements. Example: I once had a coworker try and justify sending full credit card data through Kafka as not really storing it if you set the retention time to under a second. So it was fine under PCI-DSS, right?