architectural-design-principles
Canon for decisions above the function and class. software-design-principles governs how a unit of code is written (SOLID, DRY, clean code); this skill governs how the system is shaped: layers, boundaries, its relationship to the platform, and how those properties stay true over time. Read it alongside that skill, not instead of it.
Markdown only, no scripts: consulted, not invoked. Its job is to point each architectural rule at the fitness function that enforces it. A rule no test defends is advisory; a rule a fitness function defends is part of the build.
When to use
- A workflow skill's agent contract tells you to import it (e.g. the
consort Architect Reviewer reviews every design against layering + twelve-factor; the Test Strategist authors the fitness functions named here).
- You're deciding a system boundary: what is a layer, a backing service, where config lives, what is stateless.
- You're about to declare an architectural constraint ("we use an ORM", "raw SQL appears only in the repository layer") and need it enforced, not just written down.
Architectural fitness checklist (mandatory before promote/merge)
Confirm each row before declaring the design done. A blank row is fine when scope justifies it; an unconsidered row is a smell.
| Property |
The rule |
Enforced by (fitness function) |
| Layer direction |
Dependencies point inward; infrastructure never imports service, service never imports HTTP |
import-linter (or equivalent) contract, in CI + the TDD cycle |
| Persistence boundary |
All DB access through the repository layer via the ORM; no raw SQL outside it |
"raw-SQL-location" + "ORM-only" checks |
| Config in environment |
No host, secret, or per-environment value hardcoded |
"no-hardcoded-config" grep/AST check |
| Statelessness |
A process holds no session state another instance would need; state lives in a backing service |
review + a restart-survives-request test where it matters |
| Backing services attached |
DB, object store, queue are URL/config-addressed, swappable without code change |
dev/prod parity: the same code path runs against the paired Lakebase branch |
| Mock policy |
Mocks only where there's no real backing resource; the database is never mocked |
"no-mock-for-DB" check (see test-strategy) |
| NFR budgets |
Performance / scalability / security budgets stated and measured |
NFR budget tests (see software-design-principles NFRs) |
A property with no clear owner or no fitness function: resolve it before merging.
References
- Layered architecture – the four layers, the cardinal dependency rule, ports and adapters, the repository + ORM persistence boundary. The canonical home for layering.
- Twelve-factor app – the twelve factors mapped to this substrate (paired Lakebase branch as attached backing service, config in the environment, stateless processes, dev/prod parity).
- Evolutionary architecture – fitness functions: how an architectural rule becomes an executable test that fails the build on violation, plus the catalog this kit expects.
- Evolutionary database design – the schema evolves increment by increment: migrations as the unit of change, the paired branch as a disposable test bed, parent-aware schema diff, and expand/contract for safe change.
Hard rules
- Dependencies point inward. HTTP calls service; service calls infrastructure; infrastructure never calls service; nothing calls HTTP. Enforced by a layering fitness function, not good intentions.
- The repository layer is the only door to the database, through the ORM. Raw SQL outside it is a violation a fitness function catches.
- Config lives in the environment. Hosts, credentials, per-environment limits are read from the environment, never hardcoded or committed.
- Backing services are attached resources. The database is config-addressed and swappable. Here the paired Lakebase branch IS the attached database, so dev/prod parity is the default.
- Processes are stateless and disposable. Anything a second instance would need lives in a backing service.
- Every constraint names its fitness function. If you can't say which test fails when the rule breaks, it isn't enforced.
- Mocks only where no real resource exists. Never mock the database; the paired branch makes a real isolated DB cheap. See test-strategy.
Composition
consort – Architect Reviewer imports this in architectural review (layering + twelve-factor); Test Strategist authors the fitness functions as RED tests; Navigator imports in PLAN; Driver keeps them green through REFACTOR.lakebase-scm-workflows – branch PRs reviewed against layering + the fitness-function suite in CI.
1---2name: architectural-design-principles3description: System-level engineering canon, the architecture counterpart to software-design-principles. Layered architecture + dependency direction, ports and adapters (repository / ORM-as-adapter), the twelve-factor app for cloud-native development, evolutionary architecture with fitness functions, and evolutionary database design (schema that evolves by migration on paired branches). Imported by workflow skills (consort, lakebase-scm-workflows). Use when: shaping a system boundary, deciding what is a backing service, mapping config to the environment, or authoring the fitness functions that keep the architecture honest as it evolves.4---56# architectural-design-principles78Canon for decisions above the function and class. `software-design-principles` governs how a unit of code is written (SOLID, DRY, clean code); this skill governs how the system is shaped: layers, boundaries, its relationship to the platform, and how those properties stay true over time. Read it alongside that skill, not instead of it.910Markdown only, no scripts: consulted, not invoked. Its job is to point each architectural rule at the **fitness function** that enforces it. A rule no test defends is advisory; a rule a fitness function defends is part of the build.1112## When to use1314- A workflow skill's agent contract tells you to import it (e.g. the `consort` Architect Reviewer reviews every design against layering + twelve-factor; the Test Strategist authors the fitness functions named here).15- You're deciding a system boundary: what is a layer, a backing service, where config lives, what is stateless.16- You're about to declare an architectural constraint ("we use an ORM", "raw SQL appears only in the repository layer") and need it enforced, not just written down.1718## Architectural fitness checklist (mandatory before promote/merge)1920Confirm each row before declaring the design done. A blank row is fine when scope justifies it; an unconsidered row is a smell.2122| Property | The rule | Enforced by (fitness function) |23|---|---|---|24| Layer direction | Dependencies point inward; infrastructure never imports service, service never imports HTTP | import-linter (or equivalent) contract, in CI + the TDD cycle |25| Persistence boundary | All DB access through the repository layer via the ORM; no raw SQL outside it | "raw-SQL-location" + "ORM-only" checks |26| Config in environment | No host, secret, or per-environment value hardcoded | "no-hardcoded-config" grep/AST check |27| Statelessness | A process holds no session state another instance would need; state lives in a backing service | review + a restart-survives-request test where it matters |28| Backing services attached | DB, object store, queue are URL/config-addressed, swappable without code change | dev/prod parity: the same code path runs against the paired Lakebase branch |29| Mock policy | Mocks only where there's no real backing resource; the database is never mocked | "no-mock-for-DB" check (see [test-strategy](../consort/references/test-strategy.md)) |30| NFR budgets | Performance / scalability / security budgets stated and measured | NFR budget tests (see `software-design-principles` NFRs) |3132A property with no clear owner or no fitness function: resolve it before merging.3334## References3536- [Layered architecture](references/layered-architecture.md) – the four layers, the cardinal dependency rule, ports and adapters, the repository + ORM persistence boundary. The canonical home for layering.37- [Twelve-factor app](references/twelve-factor.md) – the twelve factors mapped to this substrate (paired Lakebase branch as attached backing service, config in the environment, stateless processes, dev/prod parity).38- [Evolutionary architecture](references/evolutionary-architecture.md) – fitness functions: how an architectural rule becomes an executable test that fails the build on violation, plus the catalog this kit expects.39- [Evolutionary database design](references/evolutionary-database-design.md) – the schema evolves increment by increment: migrations as the unit of change, the paired branch as a disposable test bed, parent-aware schema diff, and expand/contract for safe change.4041## Hard rules42431. **Dependencies point inward.** HTTP calls service; service calls infrastructure; infrastructure never calls service; nothing calls HTTP. Enforced by a layering fitness function, not good intentions.442. **The repository layer is the only door to the database, through the ORM.** Raw SQL outside it is a violation a fitness function catches.453. **Config lives in the environment.** Hosts, credentials, per-environment limits are read from the environment, never hardcoded or committed.464. **Backing services are attached resources.** The database is config-addressed and swappable. Here the paired Lakebase branch IS the attached database, so dev/prod parity is the default.475. **Processes are stateless and disposable.** Anything a second instance would need lives in a backing service.486. **Every constraint names its fitness function.** If you can't say which test fails when the rule breaks, it isn't enforced.497. **Mocks only where no real resource exists.** Never mock the database; the paired branch makes a real isolated DB cheap. See [test-strategy](../consort/references/test-strategy.md).5051## Composition5253- **`consort`** – Architect Reviewer imports this in architectural review (layering + twelve-factor); Test Strategist authors the fitness functions as RED tests; Navigator imports in PLAN; Driver keeps them green through REFACTOR.54- **`lakebase-scm-workflows`** – branch PRs reviewed against layering + the fitness-function suite in CI.
databricks-solutions