A developer builds a fraud detection system. Each transaction triggers a rule engine that must check 20+ conditions in real time (transaction amount, velocity checks, merchant category, user history). The system requires sub-10ms response time. Which architecture is most appropriate?