360 Secure SkillHub
360 安全技能中心

Arch Review

在方案落地前对架构设计做压力测试:厘清规模、成本、人力与合规等约束,从故障、运维、变更和安全角度找出主要风险并给出缓解措施或验证实验,列出待团队确认的问题,最终形成可追溯的决策记录(如 ADR 或评审笔记)。不替代团队的产品判断。

codenova58
codenova58
热度 48.42
最近更新 2026-05-11 17:37:27
分类:开发依赖:纯提示词应用场景:代码审查 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add arch-review
Metadata
name
arch-review
description
Stress-test designs before they ship—constraints, trade-offs, failure modes, and ADR-worthy decisions. Use for ADRs, big refactors, new services, or when ‘it works on my laptop’ isn’t enough.

Architecture Review

Challenge a design without owning the team’s roadmap: clarify forces (scale, money, people, regulation), surface risks, and leave decisions traceable—usually as an ADR or review notes.

Inputs you need (ask early)

  • Goal and non-goals; users and SLAs; constraints (budget, deadline, org skills).
  • Current pain—latency, incidents, cost, velocity—not buzzwords.
  • Alternatives considered, even if rough.

Review lens (pick what fits)

  • Failure: blast radius, partial outages, data loss, replay.
  • Ops: deploy model, rollbacks, observability, on-call load.
  • Change: team size, Conway’s law, long-term ownership.
  • Security: trust boundaries, secrets, supply chain—at architecture depth, not a full pentest.

Output shape

  • Summary of the proposal in your own words (catches misunderstandings).
  • Top risks with severity; mitigations or experiments.
  • Open questions for the team—not a pretend-final design.

Not this

  • Replacing the team’s product judgment; rubber-stamping; 20-page templates nobody reads.

Done when

  • The team can explain what they decided, why, and what would falsify the choice later.