RFC Review Expertise
Guide comprehensive review and validation of RFC documents using structured assessment frameworks and quality rubrics.
OAK RFC Validation Workflow
Identify RFC → Run Automated Checks → Manual Review → Provide Feedback → Verify Fixes
CLI Commands
| Command |
Purpose |
oak rfc validate RFC-{number} |
Run structural validation |
oak rfc validate RFC-{number} --strict |
Strict mode (all checks) |
oak rfc show RFC-{number} |
View RFC details and metadata |
oak rfc list --status review |
Find RFCs pending review |
Review Process
Step 1: Context Gathering
Before reviewing content, gather context:
- RFC Metadata: Check status, author, creation date, tags
- Related RFCs: Search for RFCs with similar tags or scope
- Constitution Alignment: Review
oak/constitution.md for applicable standards
- Codebase Impact: Identify affected modules, services, or components
Step 2: Automated Validation
Run oak rfc validate RFC-{number} to check:
- Required sections present
- Metadata completeness
- No placeholder text remaining
- Proper markdown structure
Step 3: Manual Review
Apply the quality rubric below to assess content quality beyond structural checks.
Quality Assessment Rubric
Score each dimension 1-5 with evidence:
Clarity & Narrative Flow (1-5)
| Score |
Criteria |
| 5 |
Executive can understand problem and solution in 2 minutes |
| 4 |
Clear flow with minor ambiguities |
| 3 |
Understandable but requires re-reading sections |
| 2 |
Confusing structure or inconsistent terminology |
| 1 |
Cannot follow the proposal's logic |
Questions to ask:
- Can someone unfamiliar with the project understand the problem?
- Does the summary accurately reflect the full proposal?
- Are technical terms defined or commonly understood?
Technical Depth & Feasibility (1-5)
| Score |
Criteria |
| 5 |
Implementation-ready with clear architecture and edge cases |
| 4 |
Solid design with minor gaps that won't block review |
| 3 |
Conceptually sound but missing key implementation details |
| 2 |
Significant technical gaps or questionable feasibility |
| 1 |
Not implementable as specified |
Questions to ask:
- Could an engineer start implementation from this spec?
- Are data flows and state changes clearly described?
- Are edge cases and error conditions addressed?
Risk Identification & Mitigation (1-5)
| Score |
Criteria |
| 5 |
Comprehensive risks with owned mitigations and triggers |
| 4 |
Major risks covered with reasonable mitigations |
| 3 |
Some risks identified but gaps in mitigation |
| 2 |
Obvious risks missing or mitigations inadequate |
| 1 |
No meaningful risk analysis |
Questions to ask:
- What happens if this fails in production?
- Are operational risks (monitoring, on-call) addressed?
- Who owns each mitigation, and what triggers escalation?
Alignment with Standards (1-5)
| Score |
Criteria |
| 5 |
Fully aligned with constitution and existing patterns |
| 4 |
Minor deviations with documented rationale |
| 3 |
Some inconsistencies with project conventions |
| 2 |
Significant departures from established patterns |
| 1 |
Contradicts existing architecture or standards |
Questions to ask:
- Does this follow patterns established in prior RFCs?
- Is the approach consistent with
oak/constitution.md?
- Are deviations from standards justified?
Rollout & Measurement Readiness (1-5)
| Score |
Criteria |
| 5 |
Phased rollout with metrics, monitoring, and rollback plan |
| 4 |
Clear rollout plan with minor gaps in observability |
| 3 |
Basic rollout plan but missing rollback or metrics |
| 2 |
Vague rollout with no clear success criteria |
| 1 |
No rollout plan or success metrics |
Questions to ask:
- How will we know if this succeeded or failed?
- What's the rollback procedure if issues arise?
- Are metrics defined with baselines and targets?
Issue Severity Classification
Critical (Must Fix Before Progressing)
- Missing required sections (Summary, Motivation, Design)
- Incorrect RFC status for the review stage
- Blocking inconsistencies with adopted standards
- No rollback plan for high-risk changes
- Placeholder text in critical sections
Major (Should Fix Before Approval)
- Ambiguous scope or unclear boundaries
- Weak success metrics (no baselines or targets)
- Alternatives analysis feels superficial or biased
- Risk mitigations lack owners or triggers
- Technical design has significant gaps
Minor (Nice-to-Have Improvements)
- Stylistic inconsistencies
- Could use more examples or diagrams
- Minor formatting or markdown issues
- Additional alternatives could strengthen the case
- More detail in non-critical sections
Structured Feedback Template
When providing feedback, use this structure:
## RFC Review: RFC-{number} - {title}
### Overall Assessment
**Rating**: Ready / Needs Work / Blocked
**Rubric Scores**: Clarity: X, Technical: X, Risks: X, Alignment: X, Rollout: X
### Critical Issues
1. **[Section]**: [Issue description]
- Evidence: [Quote or reference]
- Suggested fix: [Specific recommendation]
### Major Issues
1. **[Section]**: [Issue description]
- Evidence: [Quote or reference]
- Suggested fix: [Specific recommendation]
### Minor Issues
- [Section]: [Brief issue and suggestion]
### Strengths
- [What the RFC does well]
### Questions for Author
1. [Clarifying question]
2. [Design question]
### Next Steps
- [ ] [Specific action item]
- [ ] [Specific action item]
Review Questions by Section
Summary
- Does it explain the problem, solution, AND expected impact?
- Can a busy stakeholder decide if they need to read more?
- Does it avoid implementation details?
Motivation
- Is there quantitative evidence (metrics, incidents, complaints)?
- Is it clear who is affected and how severely?
- Does it answer "why now?" convincingly?
Goals / Non-Goals
- Are goals measurable with specific numbers and timelines?
- Are non-goals specific enough to prevent scope creep?
- Do goals align with the stated motivation?
Detailed Design
- Could an engineer implement from this spec?
- Are component interactions and data flows clear?
- Are edge cases and error conditions addressed?
Drawbacks / Risks
- Are all obvious risks identified?
- Does each risk have impact, likelihood, AND mitigation?
- Are operational risks (monitoring, on-call) included?
Alternatives
- Are at least 2 alternatives considered?
- Do alternatives have genuine pros (not strawman)?
- Is the rejection rationale clear and evidence-based?
Success Metrics
- Do metrics have baselines AND targets?
- Are there both leading and lagging indicators?
- Can the metrics actually be measured with current tooling?
Rollout Plan
- Are phases clearly defined with criteria for progression?
- Is there a rollback plan with specific triggers?
- Are feature flags or blast-radius controls specified?
Common Review Findings
| Finding |
Typical Fix |
| Summary just restates the title |
Add problem evidence + expected outcome |
| "Improve performance" as a goal |
Add specific metrics: "Reduce P99 from Xms to Yms" |
| Single weak alternative |
Add 2+ alternatives with genuine pros/cons |
| Risks without mitigation owners |
Assign owner and add mitigation timeline |
| No rollback plan |
Add triggers, procedure, and owner |
| Success metrics without baselines |
Research current state and add baseline numbers |
| Placeholder text remaining |
Flag as Critical - must replace before review |
Re-Review Checklist
After fixes are applied, verify:
1---2name: rfc-review3description: Guide OAK RFC validation with quality assessment frameworks, review rubrics, and structured feedback patterns.4---5
6# RFC Review Expertise
7
8Guide comprehensive review and validation of RFC documents using structured assessment frameworks and quality rubrics.
9
10## OAK RFC Validation Workflow
11
12```
13Identify RFC → Run Automated Checks → Manual Review → Provide Feedback → Verify Fixes
14```
15
16### CLI Commands
17
18| Command | Purpose |
19|---------|---------|
20| `oak rfc validate RFC-{number}` | Run structural validation |
21| `oak rfc validate RFC-{number} --strict` | Strict mode (all checks) |
22| `oak rfc show RFC-{number}` | View RFC details and metadata |
23| `oak rfc list --status review` | Find RFCs pending review |
24
25## Review Process
26
27### Step 1: Context Gathering
28Before reviewing content, gather context:
29
301. **RFC Metadata**: Check status, author, creation date, tags
312. **Related RFCs**: Search for RFCs with similar tags or scope
323. **Constitution Alignment**: Review `oak/constitution.md` for applicable standards
334. **Codebase Impact**: Identify affected modules, services, or components
34
35### Step 2: Automated Validation
36Run `oak rfc validate RFC-{number}` to check:
37- Required sections present
38- Metadata completeness
39- No placeholder text remaining
40- Proper markdown structure
41
42### Step 3: Manual Review
43Apply the quality rubric below to assess content quality beyond structural checks.
44
45## Quality Assessment Rubric
46
47Score each dimension 1-5 with evidence:
48
49### Clarity & Narrative Flow (1-5)
50| Score | Criteria |
51|-------|----------|
52| 5 | Executive can understand problem and solution in 2 minutes |
53| 4 | Clear flow with minor ambiguities |
54| 3 | Understandable but requires re-reading sections |
55| 2 | Confusing structure or inconsistent terminology |
56| 1 | Cannot follow the proposal's logic |
57
58**Questions to ask**:
59- Can someone unfamiliar with the project understand the problem?
60- Does the summary accurately reflect the full proposal?
61- Are technical terms defined or commonly understood?
62
63### Technical Depth & Feasibility (1-5)
64| Score | Criteria |
65|-------|----------|
66| 5 | Implementation-ready with clear architecture and edge cases |
67| 4 | Solid design with minor gaps that won't block review |
68| 3 | Conceptually sound but missing key implementation details |
69| 2 | Significant technical gaps or questionable feasibility |
70| 1 | Not implementable as specified |
71
72**Questions to ask**:
73- Could an engineer start implementation from this spec?
74- Are data flows and state changes clearly described?
75- Are edge cases and error conditions addressed?
76
77### Risk Identification & Mitigation (1-5)
78| Score | Criteria |
79|-------|----------|
80| 5 | Comprehensive risks with owned mitigations and triggers |
81| 4 | Major risks covered with reasonable mitigations |
82| 3 | Some risks identified but gaps in mitigation |
83| 2 | Obvious risks missing or mitigations inadequate |
84| 1 | No meaningful risk analysis |
85
86**Questions to ask**:
87- What happens if this fails in production?
88- Are operational risks (monitoring, on-call) addressed?
89- Who owns each mitigation, and what triggers escalation?
90
91### Alignment with Standards (1-5)
92| Score | Criteria |
93|-------|----------|
94| 5 | Fully aligned with constitution and existing patterns |
95| 4 | Minor deviations with documented rationale |
96| 3 | Some inconsistencies with project conventions |
97| 2 | Significant departures from established patterns |
98| 1 | Contradicts existing architecture or standards |
99
100**Questions to ask**:
101- Does this follow patterns established in prior RFCs?
102- Is the approach consistent with `oak/constitution.md`?
103- Are deviations from standards justified?
104
105### Rollout & Measurement Readiness (1-5)
106| Score | Criteria |
107|-------|----------|
108| 5 | Phased rollout with metrics, monitoring, and rollback plan |
109| 4 | Clear rollout plan with minor gaps in observability |
110| 3 | Basic rollout plan but missing rollback or metrics |
111| 2 | Vague rollout with no clear success criteria |
112| 1 | No rollout plan or success metrics |
113
114**Questions to ask**:
115- How will we know if this succeeded or failed?
116- What's the rollback procedure if issues arise?
117- Are metrics defined with baselines and targets?
118
119## Issue Severity Classification
120
121### Critical (Must Fix Before Progressing)
122- Missing required sections (Summary, Motivation, Design)
123- Incorrect RFC status for the review stage
124- Blocking inconsistencies with adopted standards
125- No rollback plan for high-risk changes
126- Placeholder text in critical sections
127
128### Major (Should Fix Before Approval)
129- Ambiguous scope or unclear boundaries
130- Weak success metrics (no baselines or targets)
131- Alternatives analysis feels superficial or biased
132- Risk mitigations lack owners or triggers
133- Technical design has significant gaps
134
135### Minor (Nice-to-Have Improvements)
136- Stylistic inconsistencies
137- Could use more examples or diagrams
138- Minor formatting or markdown issues
139- Additional alternatives could strengthen the case
140- More detail in non-critical sections
141
142## Structured Feedback Template
143
144When providing feedback, use this structure:
145
146```markdown
147## RFC Review: RFC-{number} - {title}
148
149### Overall Assessment
150**Rating**: Ready / Needs Work / Blocked
151**Rubric Scores**: Clarity: X, Technical: X, Risks: X, Alignment: X, Rollout: X
152
153### Critical Issues
1541. **[Section]**: [Issue description]
155 - Evidence: [Quote or reference]
156 - Suggested fix: [Specific recommendation]
157
158### Major Issues
1591. **[Section]**: [Issue description]
160 - Evidence: [Quote or reference]
161 - Suggested fix: [Specific recommendation]
162
163### Minor Issues
164- [Section]: [Brief issue and suggestion]
165
166### Strengths
167- [What the RFC does well]
168
169### Questions for Author
1701. [Clarifying question]
1712. [Design question]
172
173### Next Steps
174- [ ] [Specific action item]
175- [ ] [Specific action item]
176```
177
178## Review Questions by Section
179
180### Summary
181- Does it explain the problem, solution, AND expected impact?
182- Can a busy stakeholder decide if they need to read more?
183- Does it avoid implementation details?
184
185### Motivation
186- Is there quantitative evidence (metrics, incidents, complaints)?
187- Is it clear who is affected and how severely?
188- Does it answer "why now?" convincingly?
189
190### Goals / Non-Goals
191- Are goals measurable with specific numbers and timelines?
192- Are non-goals specific enough to prevent scope creep?
193- Do goals align with the stated motivation?
194
195### Detailed Design
196- Could an engineer implement from this spec?
197- Are component interactions and data flows clear?
198- Are edge cases and error conditions addressed?
199
200### Drawbacks / Risks
201- Are all obvious risks identified?
202- Does each risk have impact, likelihood, AND mitigation?
203- Are operational risks (monitoring, on-call) included?
204
205### Alternatives
206- Are at least 2 alternatives considered?
207- Do alternatives have genuine pros (not strawman)?
208- Is the rejection rationale clear and evidence-based?
209
210### Success Metrics
211- Do metrics have baselines AND targets?
212- Are there both leading and lagging indicators?
213- Can the metrics actually be measured with current tooling?
214
215### Rollout Plan
216- Are phases clearly defined with criteria for progression?
217- Is there a rollback plan with specific triggers?
218- Are feature flags or blast-radius controls specified?
219
220## Common Review Findings
221
222| Finding | Typical Fix |
223|---------|-------------|
224| Summary just restates the title | Add problem evidence + expected outcome |
225| "Improve performance" as a goal | Add specific metrics: "Reduce P99 from Xms to Yms" |
226| Single weak alternative | Add 2+ alternatives with genuine pros/cons |
227| Risks without mitigation owners | Assign owner and add mitigation timeline |
228| No rollback plan | Add triggers, procedure, and owner |
229| Success metrics without baselines | Research current state and add baseline numbers |
230| Placeholder text remaining | Flag as Critical - must replace before review |
231
232## Re-Review Checklist
233
234After fixes are applied, verify:
235
236- [ ] All Critical issues resolved
237- [ ] Major issues addressed or explicitly deferred with rationale
238- [ ] Automated validation passes (`oak rfc validate`)
239- [ ] Cross-references updated if scope changed
240- [ ] Status updated appropriately