finished design principles

didn't do security principles, yet tho