Illustrative assessment · fictional system

Customer service portal

A worked example of the decisions and deliverables in an architecture review. This is a fictional scenario, not a client engagement or a claim of measured results.

The decision

Improve release safety and recovery before splitting the application into additional services. In this scenario, the immediate operating risks outweigh the unproven benefits of a larger redesign.

Assumed system

Browser → application API → relational database. A background worker exchanges messages with an external policy system. A small engineering team operates the application in one cloud environment.

Review boundary

Application delivery, integrations, observability, and recovery. Findings below assume interview and document evidence invented for this example. Capacity, compliance, and financial conclusions would require separate evidence in a real review.

Five priority findings

F-01 · Recovery has not been demonstrated

Assumed evidence: Backups run nightly, but the team has no recorded restore exercise.

Recommendation: Agree recovery objectives and run an isolated restore test. Record actual recovery time and data loss against those objectives.

Priority: High. Tradeoff: Uses engineering time now, but supplies evidence for recovery decisions.

F-02 · Releases lack a repeatable rollback

Assumed evidence: Application deployment is automated; database rollback behavior is undocumented.

Recommendation: Document a release and rollback runbook. Test backward-compatible schema changes and a failed deployment in staging.

Priority: High. Measure: A rehearsed release recovery with named ownership.

F-03 · Integration retries can duplicate work

Assumed evidence: The worker retries timed-out requests without a documented idempotency contract.

Recommendation: Agree deduplication keys and retry limits with the external-system owner. Test duplicates, timeouts, and failed messages.

Priority: High. Dependency: Cooperation from the external integration team.

F-04 · Support cannot follow a request across components

Assumed evidence: Logs exist, but API and worker events do not share correlation identifiers.

Recommendation: Propagate request identifiers and add one dashboard for key user journeys. Avoid logging sensitive payloads.

Priority: Medium. Measure: Support can trace a test transaction through its full path.

F-05 · Cloud costs have no service owner

Assumed evidence: Costs are reviewed at account level; application ownership tags are incomplete.

Recommendation: Assign owners, validate cost allocation, and establish a monthly review before making optimization claims.

Priority: Medium. Measure: Major cost drivers have an accountable owner and a documented baseline.

A practical 90-day sequence

PeriodWorkEvidence of completion
Days 1–30Agree recovery objectives; test a restore; rehearse rollback.Recorded recovery exercise and release runbook.
Days 31–60Confirm integration contracts and implement safe retries.Passing duplicate, timeout, and failure-path checks.
Days 61–90Add request correlation, cost ownership, and operating reviews.Traceable transactions and an owned cost baseline.

Owners and effort estimates are agreed with the delivery team. No performance improvement or cost savings are assumed without measurement.

Discuss your architectureDownload the editable toolkit