That really depends on the kind and business requirements. The first area I'm tackling is health- the simplest might be a Doctor's note that is verified against a set of npubs. As I discover domain-specific requirements, I try to generalize as quickly as possible into infrastructure requirements.