Architecture Review
Conduct rigorous architectural reviews that blend enterprise governance with modern, agent-friendly development patterns. Produce decisions that are documented, defensible, and immediately actionable.
Core Philosophy
Make decisions explicit. Every significant choice becomes an ADR.
Guardrails over gates. Provide golden paths and reference architectures, not bureaucratic approval queues.
Agent-native from day one. Structure projects so AI agents can understand, modify, and extend them reliably.
Start right, stay lean. Enterprise-grade foundations without enterprise-grade overhead.
Quick Start: New Project Review
When starting a new project, run through these phases in order:
Phase 1: Strategic Alignment (5 min)
Answer these before touching code:
- What problem does this solve? One sentence.
- Who are the users? Primary persona + scale expectations.
- What are the constraints? Budget, timeline, team size, compliance requirements.
- What exists already? Existing services, data stores, or platforms to integrate with.
- What is the deployment target? Cloud provider, on-prem, edge, hybrid.
Phase 2: Architecture Decision Cascade
Work through these decisions in order. Each produces an ADR.
| # |
Decision |
Reference |
| 1 |
Architecture style |
architecture-patterns.md |
| 2 |
Module/service boundaries |
architecture-patterns.md |
| 3 |
API strategy |
api-and-data.md |
| 4 |
Data architecture |
api-and-data.md |
| 5 |
Security posture |
security-and-compliance.md |
| 6 |
Observability stack |
devops-and-quality.md |
| 7 |
Testing strategy |
devops-and-quality.md |
| 8 |
CI/CD and deployment |
devops-and-quality.md |
| 9 |
Agent workflow setup |
agentic-patterns.md |
Phase 3: Scaffold and Ship
After decisions are made, generate the project structure. See project-scaffolding.md for the canonical directory layout and day-one checklist.
Architecture Decision Record Template
Every significant decision gets an ADR. Store in docs/adr/ with sequential numbering.
# ADR-NNNN: [Short Title]
## Status
[Proposed | Accepted | Deprecated | Superseded by ADR-XXXX]
## Context
What forces are at play? What is the problem?
## Decision Drivers
- Key factor 1
- Key factor 2
## Considered Options
1. **Option A** -- pros / cons
2. **Option B** -- pros / cons
## Decision
What we chose and why.
## Consequences
What becomes easier. What becomes harder. What risks remain.
Rules:
- One decision per ADR. Never combine.
- Immutable once accepted -- supersede, don't edit.
- Keep under 2 pages. Alternatives considered is the most valuable section.
- Link related ADRs to create a decision graph.
Quality Attributes Checklist
Evaluate every architecture against these attributes. Score each as: Addressed / Planned / Not Applicable / Risk.
| Attribute |
Key Questions |
| Scalability |
Can it handle 10x load? Horizontal or vertical strategy? |
| Security |
Auth/authz defined? Data encrypted at rest and in transit? Threat model done? |
| Reliability |
Target uptime? Redundancy and failover? |
| Performance |
Latency budgets? Throughput targets? |
| Maintainability |
Modular? Clear boundaries? Can a new developer (or agent) be productive in a day? |
| Observability |
Structured logging? Distributed tracing? Alerting? |
| Testability |
Can components be tested in isolation? What is the test strategy shape? |
| Deployability |
CI/CD automated? Blue-green/canary capability? Rollback plan? |
| Cost efficiency |
Resource utilization optimized? Pay-per-use aligned? |
| Agent compatibility |
Can AI agents understand, modify, and extend this codebase? |
Anti-Patterns to Flag
Reject architectures exhibiting these patterns:
| Anti-Pattern |
Signal |
| Big Ball of Mud |
No clear module boundaries, circular dependencies |
| Over-Engineering |
Google-scale infra for startup workloads |
| Blind Pattern Following |
"We chose microservices because Netflix" without justification |
| Infrastructure Ignorance |
Designs assuming unlimited bandwidth or zero latency |
| Under-Modularization |
Monolithic components that can't deploy independently |
| Over-Modularization |
Hundreds of nano-services creating operational overhead |
| Document Theater |
Extensive paperwork that nobody reads or acts on |
| Domain Allergy |
Architecture that ignores business domain and language |
Review Outcomes
Every review produces one of these decisions:
| Decision |
Meaning |
| Approved |
Proceed as designed |
| Approved with conditions |
Proceed with specific modifications |
| Needs more info |
Specific questions must be answered first |
| Redesign required |
Does not meet quality standards |
Reference Materials
- Architecture Patterns -- Hexagonal, DDD, modular monolith, microservices decision framework
- API and Data Architecture -- REST/GraphQL/gRPC, database selection, caching, event streaming
- Security and Compliance -- Zero trust, OWASP, auth patterns, supply chain, compliance
- DevOps and Quality -- CI/CD, observability, testing strategies, resilience patterns
- Agentic Patterns -- Agent-native project structure, CLAUDE.md, parallel work, quality gates
- Project Scaffolding -- Day-one directory structure, checklist, and timeline
1---2name: architecture-review3description: Conduct architectural reviews for new or existing software projects. Use when: (1) starting a new project and need architectural foundations, (2) reviewing architecture decisions before implementation, (3) creating ADRs or design docs, (4) evaluating technology selections, (5) assessing non-functional requirements, (6) setting up project scaffolding with built-in quality. Combines enterprise ARB governance with modern agentic coding patterns.4---56# Architecture Review78Conduct rigorous architectural reviews that blend enterprise governance with modern, agent-friendly development patterns. Produce decisions that are documented, defensible, and immediately actionable.910## Core Philosophy1112**Make decisions explicit.** Every significant choice becomes an ADR.13**Guardrails over gates.** Provide golden paths and reference architectures, not bureaucratic approval queues.14**Agent-native from day one.** Structure projects so AI agents can understand, modify, and extend them reliably.15**Start right, stay lean.** Enterprise-grade foundations without enterprise-grade overhead.1617---1819## Quick Start: New Project Review2021When starting a new project, run through these phases in order:2223### Phase 1: Strategic Alignment (5 min)2425Answer these before touching code:26271. **What problem does this solve?** One sentence.282. **Who are the users?** Primary persona + scale expectations.293. **What are the constraints?** Budget, timeline, team size, compliance requirements.304. **What exists already?** Existing services, data stores, or platforms to integrate with.315. **What is the deployment target?** Cloud provider, on-prem, edge, hybrid.3233### Phase 2: Architecture Decision Cascade3435Work through these decisions in order. Each produces an ADR.3637| # | Decision | Reference |38|---|----------|-----------|39| 1 | Architecture style | [architecture-patterns.md](references/architecture-patterns.md) |40| 2 | Module/service boundaries | [architecture-patterns.md](references/architecture-patterns.md) |41| 3 | API strategy | [api-and-data.md](references/api-and-data.md) |42| 4 | Data architecture | [api-and-data.md](references/api-and-data.md) |43| 5 | Security posture | [security-and-compliance.md](references/security-and-compliance.md) |44| 6 | Observability stack | [devops-and-quality.md](references/devops-and-quality.md) |45| 7 | Testing strategy | [devops-and-quality.md](references/devops-and-quality.md) |46| 8 | CI/CD and deployment | [devops-and-quality.md](references/devops-and-quality.md) |47| 9 | Agent workflow setup | [agentic-patterns.md](references/agentic-patterns.md) |4849### Phase 3: Scaffold and Ship5051After decisions are made, generate the project structure. See [project-scaffolding.md](references/project-scaffolding.md) for the canonical directory layout and day-one checklist.5253---5455## Architecture Decision Record Template5657Every significant decision gets an ADR. Store in `docs/adr/` with sequential numbering.5859```markdown60# ADR-NNNN: [Short Title]6162## Status63[Proposed | Accepted | Deprecated | Superseded by ADR-XXXX]6465## Context66What forces are at play? What is the problem?6768## Decision Drivers69- Key factor 170- Key factor 27172## Considered Options731. **Option A** -- pros / cons742. **Option B** -- pros / cons7576## Decision77What we chose and why.7879## Consequences80What becomes easier. What becomes harder. What risks remain.81```8283**Rules:**84- One decision per ADR. Never combine.85- Immutable once accepted -- supersede, don't edit.86- Keep under 2 pages. Alternatives considered is the most valuable section.87- Link related ADRs to create a decision graph.8889---9091## Quality Attributes Checklist9293Evaluate every architecture against these attributes. Score each as: Addressed / Planned / Not Applicable / Risk.9495| Attribute | Key Questions |96|-----------|---------------|97| **Scalability** | Can it handle 10x load? Horizontal or vertical strategy? |98| **Security** | Auth/authz defined? Data encrypted at rest and in transit? Threat model done? |99| **Reliability** | Target uptime? Redundancy and failover? |100| **Performance** | Latency budgets? Throughput targets? |101| **Maintainability** | Modular? Clear boundaries? Can a new developer (or agent) be productive in a day? |102| **Observability** | Structured logging? Distributed tracing? Alerting? |103| **Testability** | Can components be tested in isolation? What is the test strategy shape? |104| **Deployability** | CI/CD automated? Blue-green/canary capability? Rollback plan? |105| **Cost efficiency** | Resource utilization optimized? Pay-per-use aligned? |106| **Agent compatibility** | Can AI agents understand, modify, and extend this codebase? |107108---109110## Anti-Patterns to Flag111112Reject architectures exhibiting these patterns:113114| Anti-Pattern | Signal |115|--------------|--------|116| **Big Ball of Mud** | No clear module boundaries, circular dependencies |117| **Over-Engineering** | Google-scale infra for startup workloads |118| **Blind Pattern Following** | "We chose microservices because Netflix" without justification |119| **Infrastructure Ignorance** | Designs assuming unlimited bandwidth or zero latency |120| **Under-Modularization** | Monolithic components that can't deploy independently |121| **Over-Modularization** | Hundreds of nano-services creating operational overhead |122| **Document Theater** | Extensive paperwork that nobody reads or acts on |123| **Domain Allergy** | Architecture that ignores business domain and language |124125---126127## Review Outcomes128129Every review produces one of these decisions:130131| Decision | Meaning |132|----------|---------|133| **Approved** | Proceed as designed |134| **Approved with conditions** | Proceed with specific modifications |135| **Needs more info** | Specific questions must be answered first |136| **Redesign required** | Does not meet quality standards |137138---139140## Reference Materials141142- [Architecture Patterns](references/architecture-patterns.md) -- Hexagonal, DDD, modular monolith, microservices decision framework143- [API and Data Architecture](references/api-and-data.md) -- REST/GraphQL/gRPC, database selection, caching, event streaming144- [Security and Compliance](references/security-and-compliance.md) -- Zero trust, OWASP, auth patterns, supply chain, compliance145- [DevOps and Quality](references/devops-and-quality.md) -- CI/CD, observability, testing strategies, resilience patterns146- [Agentic Patterns](references/agentic-patterns.md) -- Agent-native project structure, CLAUDE.md, parallel work, quality gates147- [Project Scaffolding](references/project-scaffolding.md) -- Day-one directory structure, checklist, and timeline
marcus