Feature Lifecycle
Maps the full lifecycle of a feature from idea through production monitoring. Explicitly shows each role's contribution at each phase.
Domain Context
A feature doesn't live in isolation. It moves through distinct phases, and at each phase, a different role takes the lead:
| Phase |
Primary Role |
Input |
Output |
Exit Criteria |
| Ideation |
Product Manager |
User problem, business goal |
Problem statement, roadmap prioritization |
Feature approved for requirements |
| Requirements |
Product Manager + Architect |
Problem statement, constraints |
User stories, acceptance criteria, success metrics |
Requirements complete (DoR) |
| Design |
Architect + Security + Designer |
Requirements, constraints |
Architecture docs, design mockups, threat model |
Design approved |
| Development |
Engineer |
Design, DoR acceptance criteria |
Code, unit tests, implementation docs |
Code review passed, tests green |
| Testing |
QA + Engineer |
Design, implementation |
Test cases, test results, bug reports |
Test coverage met, bugs resolved |
| Deployment |
Tech Lead + Engineer |
Tested code, runbook, monitoring |
Deployment pipeline, rollback procedure, monitoring alerts |
Deployed to production |
| Operations |
Tech Lead |
Running feature in production |
Logs, metrics, incidents, customer feedback |
Stable, no critical issues |
| Closure |
Product Manager + Tech Lead |
Operational stability, metrics |
Retrospective, lessons learned, backlog improvements |
Feature documented, team debriefed |
The feature lifecycle is not linear. It may:
- Loop back (design issue found during development → redesign → reimplement)
- Iterate (deploy v1 → get feedback → plan v2 improvements)
- Split (feature splits into multiple parallel epics)
ISO/IEC 12207 Reference:
- 5.2.1 Stakeholder Needs and Requirements Definition
- 5.3 Technical Processes (design, implementation, verification, transition, operation)
Instructions
Step 1: Establish Feature Context
- Input: Feature name, problem statement, business goal
- Ask: Who's the primary PM? Architect? Security lead?
- Ask: What's the approximate scope? (small feature, large epic, infrastructure)
- Ask: Are there known constraints? (timeline, security, performance, compatibility)
Step 2: Ideation Phase
- PM: Articulates problem, potential solutions, business value
- Output: Problem statement, initial roadmap prioritization
- Next: Send to requirements planning
Step 3: Requirements Phase
- PM: Writes user stories, acceptance criteria, success metrics
- Architect: Assesses feasibility, identifies design complexity, dependency risks
- Security: Identifies threat surface, required security controls
- Designer: Scopes UX work, design systems integration
- Tech Lead: Estimates effort, identifies team skills, deployment strategy
Use /sdlc:definition-of-ready to validate requirements completeness
- Output: Requirements document (user stories, success metrics, acceptance criteria, DoR checklist)
- Exit: All DoR criteria met; ready to move to design
Step 4: Design Phase
- Architect: Decomposes system into components, documents trade-offs, creates architecture diagrams
- Security: Creates threat model (STRIDE), identifies mitigations, scopes security testing
- Designer: Creates wireframes, mockups, interaction patterns, accessibility plan
- Engineer: Participates in design review, identifies implementation risks
- Tech Lead: Reviews design for operational implications (monitoring, logging, scaling)
Use /sdlc:design-review to validate design cross-functionally
- Output: Design document (architecture, threat model, mockups, accessibility plan, trade-offs)
- Exit: Design approved by architect, security, designer; no blocking issues
Step 5: Development Phase
- Engineer: Implements code following the design, writes unit tests, participates in code reviews
- QA: Works with engineer on test strategy, preps test cases
- Tech Lead: Ensures code is maintainable, reviews code organization
- Designer: Ensures implementation matches design; flags mismatches
Use /sdlc:quality-gate to validate implementation meets design and code standards
- Output: Working code with unit tests, code review, implementation documentation
- Exit: Code review passed, unit tests passing, DoD implementation criteria met
Step 6: Testing Phase
- QA: Executes test strategy, reports bugs, validates fixes
- Engineer: Fixes bugs, works with QA on edge cases
- Security: Runs SAST/DAST scans, validates security controls
- Designer: Validates UI/UX match design on real implementation
Use /sdlc:quality-gate again to validate testing is complete
- Output: Test results, bug reports, security scan results
- Exit: All test cases passed, bugs fixed, security scan passed, test coverage adequate
Step 7: Deployment Phase
- Tech Lead: Orchestrates deployment, ensures rollback procedure is ready
- Engineer: Executes deployment steps, monitors for anomalies
- Operations: Monitors system health, readies for incident response
- PM: Prepares release communications, customer notifications
Use /sdlc:release-checklist to validate deployment readiness
- Output: Feature deployed to production, monitoring active, incidents ready
- Exit: Feature stable in production, no critical alerts, team trained
Step 8: Operations Phase
- Tech Lead: Monitors feature health, responds to incidents
- Engineer: Responds to bugs, works on post-launch improvements
- PM: Collects user feedback, observes success metrics
- Security: Monitors for security anomalies
Duration: Minimum 1-2 weeks; until stability is confirmed
- Output: Operational metrics, incident reports, user feedback
- Exit: Feature meets success metrics, no critical issues, team confident in stability
Step 9: Closure Phase
- PM: Validates success metrics, gathers user feedback, plans follow-up improvements
- Tech Lead: Facilitates retrospective, documents lessons learned
- Engineer: Archives technical docs, identifies debt to address
- Security: Reviews security incidents (if any), updates threat model if needed
Use /sdlc:retrospective-to-action to consolidate learnings
- Output: Retrospective document, action items, lessons learned, feature tagged as stable
- Exit: Feature is documented, team debriefed, backlog has follow-up items if needed
Step 10: Document the Feature Lifecycle
Create a feature lifecycle document:
Feature: [Name]
Problem: [User problem being solved]
Business Goal: [Expected impact]
Timeline: [Estimated dates for each phase]
Ideation: [PM drive, dates, decisions]
Requirements: [Stories, success metrics, DoR]
Design: [Architecture, threats, mockups, DoD]
Development: [Code, tests, documentation]
Testing: [Test results, bugs, fixes]
Deployment: [Release plan, rollback procedure]
Operations: [Stability period, incidents, metrics]
Closure: [Retrospective, lessons learned, follow-ups]
Key Milestones:
- Requirements approved: [date]
- Design approved: [date]
- Code complete: [date]
- Testing approved: [date]
- Production deployment: [date]
- Stability confirmed: [date]
Role Contributions:
- PM: Requirements, go/no-go decisions, success metric validation
- Architect: Design, trade-off analysis, scaling/performance review
- Security: Threat modeling, security testing, vulnerability management
- Engineer: Implementation, code quality, testing, deployment
- QA: Test strategy, test execution, bug triage
- Designer: UX design, accessibility, design system consistency
- Tech Lead: Orchestration, documentation, operational readiness
Post-Launch Actions: [Follow-up items, technical debt, process improvements]
Anti-Patterns
Skipping the operations phase
- Mistake: "Feature is deployed, we're done"
- Correct: Operations phase confirms stability; only then is it "done"
- Fix: Require minimum 1-2 weeks of monitoring before closure
Not looping back on design issues found during development
- Mistake: "The design says do X, but it doesn't work, so let's hack around it"
- Correct: Design issues should trigger a design redesign, not implementation hacks
- Fix: When development hits design issues, pause and redesign before implementing
Skipping the designer throughout the lifecycle
- Mistake: "Designer was involved at the start, now engineering owns it"
- Correct: Designer reviews implementation against design; catches mismatches early
- Fix: Designer is involved in design phase → development QA → launch verification
Not including security until testing phase
- Mistake: "Security review happens at the end"
- Correct: Security is part of design (threat modeling); testing phase is too late
- Fix: Security designs threat model in design phase; testing phase validates mitigations
Treating closure as optional
- Mistake: "We shipped it, closing the ticket now"
- Correct: Closure requires retrospective and lessons learned
- Fix: Require closure ceremony; capture learnings for future features
Further Reading
- ISO/IEC 12207 — Software lifecycle processes
- Agile Release Train — SAFe, Program Increment Planning (https://www.scaledagileframework.com/)
- Feature Lifecycle — Reinertsen, D., "The Principles of Product Development Flow" (Celeritas Publishing)
1---2name: feature-lifecycle3description: Feature Lifecycle4---5# Feature Lifecycle67Maps the full lifecycle of a feature from idea through production monitoring. Explicitly shows each role's contribution at each phase.89## Domain Context1011A feature doesn't live in isolation. It moves through distinct phases, and at each phase, a different role takes the lead:1213| Phase | Primary Role | Input | Output | Exit Criteria |14| ------------ | ------------------------------- | -------------------------------- | ---------------------------------------------------------- | ---------------------------------- |15| Ideation | Product Manager | User problem, business goal | Problem statement, roadmap prioritization | Feature approved for requirements |16| Requirements | Product Manager + Architect | Problem statement, constraints | User stories, acceptance criteria, success metrics | Requirements complete (DoR) |17| Design | Architect + Security + Designer | Requirements, constraints | Architecture docs, design mockups, threat model | Design approved |18| Development | Engineer | Design, DoR acceptance criteria | Code, unit tests, implementation docs | Code review passed, tests green |19| Testing | QA + Engineer | Design, implementation | Test cases, test results, bug reports | Test coverage met, bugs resolved |20| Deployment | Tech Lead + Engineer | Tested code, runbook, monitoring | Deployment pipeline, rollback procedure, monitoring alerts | Deployed to production |21| Operations | Tech Lead | Running feature in production | Logs, metrics, incidents, customer feedback | Stable, no critical issues |22| Closure | Product Manager + Tech Lead | Operational stability, metrics | Retrospective, lessons learned, backlog improvements | Feature documented, team debriefed |2324The feature lifecycle is not linear. It may:2526- Loop back (design issue found during development → redesign → reimplement)27- Iterate (deploy v1 → get feedback → plan v2 improvements)28- Split (feature splits into multiple parallel epics)2930**ISO/IEC 12207 Reference:**3132- 5.2.1 Stakeholder Needs and Requirements Definition33- 5.3 Technical Processes (design, implementation, verification, transition, operation)3435## Instructions3637### Step 1: Establish Feature Context3839- **Input**: Feature name, problem statement, business goal40- **Ask**: Who's the primary PM? Architect? Security lead?41- **Ask**: What's the approximate scope? (small feature, large epic, infrastructure)42- **Ask**: Are there known constraints? (timeline, security, performance, compatibility)4344### Step 2: Ideation Phase4546- **PM**: Articulates problem, potential solutions, business value47- **Output**: Problem statement, initial roadmap prioritization48- **Next**: Send to requirements planning4950### Step 3: Requirements Phase5152- **PM**: Writes user stories, acceptance criteria, success metrics53- **Architect**: Assesses feasibility, identifies design complexity, dependency risks54- **Security**: Identifies threat surface, required security controls55- **Designer**: Scopes UX work, design systems integration56- **Tech Lead**: Estimates effort, identifies team skills, deployment strategy5758Use `/sdlc:definition-of-ready` to validate requirements completeness5960- **Output**: Requirements document (user stories, success metrics, acceptance criteria, DoR checklist)61- **Exit**: All DoR criteria met; ready to move to design6263### Step 4: Design Phase6465- **Architect**: Decomposes system into components, documents trade-offs, creates architecture diagrams66- **Security**: Creates threat model (STRIDE), identifies mitigations, scopes security testing67- **Designer**: Creates wireframes, mockups, interaction patterns, accessibility plan68- **Engineer**: Participates in design review, identifies implementation risks69- **Tech Lead**: Reviews design for operational implications (monitoring, logging, scaling)7071Use `/sdlc:design-review` to validate design cross-functionally7273- **Output**: Design document (architecture, threat model, mockups, accessibility plan, trade-offs)74- **Exit**: Design approved by architect, security, designer; no blocking issues7576### Step 5: Development Phase7778- **Engineer**: Implements code following the design, writes unit tests, participates in code reviews79- **QA**: Works with engineer on test strategy, preps test cases80- **Tech Lead**: Ensures code is maintainable, reviews code organization81- **Designer**: Ensures implementation matches design; flags mismatches8283Use `/sdlc:quality-gate` to validate implementation meets design and code standards8485- **Output**: Working code with unit tests, code review, implementation documentation86- **Exit**: Code review passed, unit tests passing, DoD implementation criteria met8788### Step 6: Testing Phase8990- **QA**: Executes test strategy, reports bugs, validates fixes91- **Engineer**: Fixes bugs, works with QA on edge cases92- **Security**: Runs SAST/DAST scans, validates security controls93- **Designer**: Validates UI/UX match design on real implementation9495Use `/sdlc:quality-gate` again to validate testing is complete9697- **Output**: Test results, bug reports, security scan results98- **Exit**: All test cases passed, bugs fixed, security scan passed, test coverage adequate99100### Step 7: Deployment Phase101102- **Tech Lead**: Orchestrates deployment, ensures rollback procedure is ready103- **Engineer**: Executes deployment steps, monitors for anomalies104- **Operations**: Monitors system health, readies for incident response105- **PM**: Prepares release communications, customer notifications106107Use `/sdlc:release-checklist` to validate deployment readiness108109- **Output**: Feature deployed to production, monitoring active, incidents ready110- **Exit**: Feature stable in production, no critical alerts, team trained111112### Step 8: Operations Phase113114- **Tech Lead**: Monitors feature health, responds to incidents115- **Engineer**: Responds to bugs, works on post-launch improvements116- **PM**: Collects user feedback, observes success metrics117- **Security**: Monitors for security anomalies118119Duration: Minimum 1-2 weeks; until stability is confirmed120121- **Output**: Operational metrics, incident reports, user feedback122- **Exit**: Feature meets success metrics, no critical issues, team confident in stability123124### Step 9: Closure Phase125126- **PM**: Validates success metrics, gathers user feedback, plans follow-up improvements127- **Tech Lead**: Facilitates retrospective, documents lessons learned128- **Engineer**: Archives technical docs, identifies debt to address129- **Security**: Reviews security incidents (if any), updates threat model if needed130131Use `/sdlc:retrospective-to-action` to consolidate learnings132133- **Output**: Retrospective document, action items, lessons learned, feature tagged as stable134- **Exit**: Feature is documented, team debriefed, backlog has follow-up items if needed135136### Step 10: Document the Feature Lifecycle137138Create a feature lifecycle document:139```140141Feature: [Name]142Problem: [User problem being solved]143Business Goal: [Expected impact]144Timeline: [Estimated dates for each phase]145146Ideation: [PM drive, dates, decisions]147Requirements: [Stories, success metrics, DoR]148Design: [Architecture, threats, mockups, DoD]149Development: [Code, tests, documentation]150Testing: [Test results, bugs, fixes]151Deployment: [Release plan, rollback procedure]152Operations: [Stability period, incidents, metrics]153Closure: [Retrospective, lessons learned, follow-ups]154155Key Milestones:156157- Requirements approved: [date]158- Design approved: [date]159- Code complete: [date]160- Testing approved: [date]161- Production deployment: [date]162- Stability confirmed: [date]163164Role Contributions:165166- PM: Requirements, go/no-go decisions, success metric validation167- Architect: Design, trade-off analysis, scaling/performance review168- Security: Threat modeling, security testing, vulnerability management169- Engineer: Implementation, code quality, testing, deployment170- QA: Test strategy, test execution, bug triage171- Designer: UX design, accessibility, design system consistency172- Tech Lead: Orchestration, documentation, operational readiness173174Post-Launch Actions: [Follow-up items, technical debt, process improvements]175176```177178## Anti-Patterns1791801. **Skipping the operations phase**181 - Mistake: "Feature is deployed, we're done"182 - Correct: Operations phase confirms stability; only then is it "done"183 - Fix: Require minimum 1-2 weeks of monitoring before closure1841852. **Not looping back on design issues found during development**186 - Mistake: "The design says do X, but it doesn't work, so let's hack around it"187 - Correct: Design issues should trigger a design redesign, not implementation hacks188 - Fix: When development hits design issues, pause and redesign before implementing1891903. **Skipping the designer throughout the lifecycle**191 - Mistake: "Designer was involved at the start, now engineering owns it"192 - Correct: Designer reviews implementation against design; catches mismatches early193 - Fix: Designer is involved in design phase → development QA → launch verification1941954. **Not including security until testing phase**196 - Mistake: "Security review happens at the end"197 - Correct: Security is part of design (threat modeling); testing phase is too late198 - Fix: Security designs threat model in design phase; testing phase validates mitigations1992005. **Treating closure as optional**201 - Mistake: "We shipped it, closing the ticket now"202 - Correct: Closure requires retrospective and lessons learned203 - Fix: Require closure ceremony; capture learnings for future features204205## Further Reading206207- **ISO/IEC 12207** — Software lifecycle processes208- **Agile Release Train** — SAFe, Program Increment Planning (https://www.scaledagileframework.com/)209- **Feature Lifecycle** — Reinertsen, D., "The Principles of Product Development Flow" (Celeritas Publishing)