Introduction to Architecture Reviews

Understanding business projection and life of services

Mapping business services to Architectural Quanta

Business capability model & domain mapping

Scalability and growth trajectory assumptions

Regulatory, compliance, and data residency requirements

Functional boundaries

Deployment boundaries

Inseparable component analysis

Data boundary and ownership — bounded contexts

Security zone boundaries and trust levels

Transaction and consistency boundaries — ACID vs eventual

Diagrams — as-built

Primary and secondary component identification

Sequence and flow analysis

Dependency graph and coupling analysis

Data flow and lineage tracing

Identifying critical IP and freezing them

Authentication, authorisation and identity model — AuthN/AuthZ

Secrets and credential management — rotation, vaulting

Data classification, encryption at rest and in transit

License audit — open source obligations and copyleft risk

Libraries in use and additional library requirements

Connector and parameterisation tuning

Dependency version currency and CVE/vulnerability status

Configuration management and environment parity

API versioning strategy and backward compatibility

Dead code identification and classification

Refactor methods and qualification criteria

Technical debt inventory and prioritisation backlog

Anti-pattern detection — God class, circular dependency, etc.

Test coverage analysis — unit, integration, contract, E2E

Code duplication and shared-library candidacy

Metrics of architecture — coupling, cohesion, complexity

Fitness functions — SLA, latency, throughput, availability

Observability coverage — logs, metrics, traces

Capacity and cost model — compute, storage, egress spend

Deployment pipeline and CI/CD maturity review

Resilience and failure mode analysis

Disaster recovery — RTO / RPO targets and validation

Runbook and incident management coverage