Architecture & Delivery
1) Discovery to PRD
- Stakeholder interviews → problem framing → success metrics.
- Define MVP scope, non-functional requirements, and roadmap.
- Traceability: PRD → epics → stories → test cases.
2) Architecture Principles
- 12-factor apps, domain-driven design, event-driven where needed.
- APIs first; clear versioning, idempotency, and rate limits.
- Observability built-in (traces, metrics, logs, SLIs/SLOs).
3) Security by Design
- Least privilege IAM, secrets in KMS/GSM, SBOM & dependency scans.
- OWASP ASVS controls; threat modeling for critical flows.
4) DevEx & CI/CD
- Git branching strategy, review gates, automated tests.
- Canary/blue-green deploys; rollback playbooks.
5) Quality & Performance
- Contract tests for services; load tests on critical paths.
- Error budgets guide release cadence.