skills/architecture-enterprise-alignment/SKILL.md
Map a Product Owner Specification onto the organization's 8-domain BIAN v14 capability map (Enterprise Management, Resource Management, Finance & Risks, Operations, Products, Customers, Channels, Business Enabler — 47 capabilities total). Produces ENTERPRISE_ALIGNMENT.md identifying which corporate domains are impacted, which governance rules apply, and which owner counterparts to engage. Mandatory gate before architecture-docs Workflow 1 (new ARCHITECTURE.md creation). Bundled enterprise model is overridable via project-local ENTERPRISE_MODEL.md.
npx skillsauth add shadowx4fox/solutions-architect-skills architecture-enterprise-alignmentInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
This skill maps a Product Owner Specification (Phase 1 artifact) onto the organization's BIAN v14 capability map (8 top-level domains, 47 capabilities) to produce ENTERPRISE_ALIGNMENT.md at the project root.
The report identifies — before the architecture team begins design — which corporate domains are impacted, which governance rules apply, which owner counterparts must be engaged, and where cross-cutting concerns (Finance & Risks, Business Enabler, Enterprise Management) require mandatory checks.
It answers: "Which enterprise domains does this initiative touch, what governance rules will constrain it, and who do we need to talk to before designing?"
Output: ENTERPRISE_ALIGNMENT.md at the project root — single markdown file designed for tickets, emails, Architecture Review Boards, and stakeholder kickoffs.
Mandatory gate: architecture-docs Workflow 1 (Step 0.3) BLOCKS new ARCHITECTURE.md creation until this file exists.
architecture-docs Workflow 1 Step 0.3 directs the user here because ENTERPRISE_ALIGNMENT.md is missing/skill architecture-enterprise-alignmentDo NOT invoke for:
architecture-readiness skillarchitecture-docs skillarchitecture-traceability skillarchitecture-compliance skillarchitecture-peer-review skill| File | Purpose |
|------|---------|
| SKILL.md | This file — entry point and workflow |
| ENTERPRISE_MODEL.md | Bundled 8-domain default model (BIAN v14, 47 capabilities). Used unless overridden by a project-local ENTERPRISE_MODEL.md at the project root. |
| ENTERPRISE_ALIGNMENT_TEMPLATE.md | Output template — Summary table, per-domain analysis (8 sub-sections), Cross-Cutting Findings, Owner Engagement Plan, Next Steps |
| ANALYSIS_METHODOLOGY.md | How to extract business capabilities from the PO Spec and classify each domain — "What vs. How" rule, evidence citation, cross-cutting checks |
Search for the Product Owner Specification:
Search order:
1. PRODUCT_OWNER_SPEC.md at project root
2. PO_SPEC.md at project root
3. Glob **/PRODUCT_OWNER_SPEC.md, **/PO_SPEC.md
4. Glob **/po-spec*, **/product-owner*
5. Ask user for path
If no PO Spec found, abort with: "No Product Owner Specification found. Use /sa-skills:architecture-readiness to create one first — enterprise alignment requires accepted business context."
If multiple matches, list them and ask the user to select one.
Resolve which enterprise model to use:
Resolution order:
1. ENTERPRISE_MODEL.md at project root → project-local override
2. Bundled default at <plugin>/skills/architecture-enterprise-alignment/ENTERPRISE_MODEL.md
Record the source so it can be cited in the report header:
Enterprise Model: project-local override (ENTERPRISE_MODEL.md) if (1) foundEnterprise Model: bundled default (sa-skills v{plugin-version}) if (2) usedIf neither exists (plugin install corrupted), abort with: "Bundled ENTERPRISE_MODEL.md missing from plugin. Reinstall sa-skills or provide a project-local ENTERPRISE_MODEL.md."
Read the resolved model fully. The bundled default defines 8 top-level domains (Enterprise Management, Resource Management, Finance & Risks, Operations, Products, Customers, Channels, Business Enabler) covering 47 capabilities, plus 8 cross-cutting governance principles.
Read the PO Spec and extract business-capability evidence from these sections (matching the structure in skills/architecture-readiness/templates/PO_SPEC_TEMPLATE.md):
| PO Spec Section | What to extract | Feeds which domains | |-----------------|-----------------|---------------------| | § 1 Business Context | Problem statement, target market, strategic alignment, timing | Customers, Enterprise Management | | § 2 Stakeholders & Users | User personas (employees vs customers vs prospects), stakeholder roles | Customers, Resource Management (if employees are users) | | § 3 Business Objectives | Goals, KPIs, monetary impact, customer impact | Products, Customers, Finance & Risks | | § 4 Use Cases | Actors, primary/alternative flows, edge cases | All 8 (most evidence-rich section) | | § 5 User Stories | Acceptance criteria, role-based capabilities | Customers, Channels | | § 6 UX Requirements | Channels mentioned, performance, accessibility | Channels | | § 7 Business Constraints | Regulatory, integration, budget, operational | Finance & Risks, Business Enabler, Resource Management, Enterprise Management | | § 8 Success Metrics | Adoption, KPIs, leading/lagging indicators | All cross-cutting (Enterprise Management, Finance & Risks, Business Enabler) |
Extraction filter — "What vs. How": When the PO Spec mentions specific technologies, vendors, or implementation paths (e.g., "integrate with the interbank settlement network via SOAP"), record the business capability ("inter-bank transfer settlement") not the implementation. The "how" belongs to the architecture team; the alignment maps "what" against enterprise domains.
Produce a structured capability list:
capabilities:
- text: "<short business-capability statement>"
source: "§ <section number> — <heading>"
evidence_quote: "<verbatim excerpt, max 200 chars>"
actors: ["<actor>", ...] # if mentioned
channels: ["<channel>", ...] # if mentioned
money_flow: true|false # does it move money?
data_touched: ["<entity>", ...] # customer, product, transaction, etc.
Capabilities are the unit of analysis for Step 4.
For each of the 8 domains in the Enterprise Model, perform classification:
Status taxonomy:
For each domain, capture:
ENTERPRISE_MODEL.md § "Governance rules" for that domain (quote literally — do not paraphrase)**Capabilities** in ENTERPRISE_MODEL.md § 3.X) using the same 🟢 / 🟡 / ⚪ taxonomy. Output a bullet list of every 🟢 / 🟡 capability with per-capability status, one-line rationale, and PO Spec § citation, followed by a parenthesized (not impacted: <comma-separated remaining capability names>) footer. ⚪ domains use the single line _None._ (or _None — see § Cross-Cutting Findings._ for mandatory-check domains). Capability names cited verbatim — no abbreviation, no aliasing.See ANALYSIS_METHODOLOGY.md for the detailed classification heuristics, including:
ANALYSIS_METHODOLOGY.md § 3.5 Per-Capability Classification)Three domains are always evaluated regardless of the Step 4 classification, because the bundled model's "Cross-cutting Governance Principles" (§ 4) impose org-wide requirements:
| Domain | Mandatory check | |--------|-----------------| | 3.1 Enterprise Management | Policy compliance, initiative registration, entity/legal/IP impact. Every initiative must trace to an Enterprise Direction objective (per § 3.1 rule 1) and respect institutional policy ownership. Flag a 🔴 Cross-Cutting Gap if the PO Spec implies policy invention outside this domain or has no Initiative Management anchor. | | 3.3 Finance & Risks | Every Product, Channel, or Operations initiative must undergo prior assessment by Risk & Compliance Management (per § 3.3 rule 1). If the PO Spec touches any of these and no risk engagement is planned, flag a 🔴 Cross-Cutting Gap. Also covers the Financial Management ledger and audit-trail requirements for any monetary impact. | | 3.8 Business Enabler | Architecture standards (IT Management), governed APIs (Message Management), security-by-design (Security Management), FinOps (IT Management), and the data-governance authoritative-source / data-as-a-product / AI explainability rules. Any solution must align with these regardless of per-domain status. Identify the business entities the PO Spec touches (customer, product, transaction, employee, accounting record) and confirm authoritative ownership is implied or escalate as a gap. |
These cross-cutting findings go in a separate section of the report (not duplicated inside the per-domain analysis).
Synthesize a kickoff engagement plan from the classification:
Before kickoff, Before architecture sign-off, or Before production, mapped from the rule's wording:
This is the actionable output the architect uses to set up stakeholder meetings.
ENTERPRISE_ALIGNMENT.mdLoad ENTERPRISE_ALIGNMENT_TEMPLATE.md. Fill in:
# | Domain | Status | Capabilities Impacted | Rules Triggered | Owners to Engage — the Capabilities Impacted column shows N/total where total is the domain's canonical capability count (7 / 5 / 5 / 3 / 8 / 10 / 2 / 7 for domains 3.1 → 3.8). Footer reads **Total domains**: 8 · **Impacted (🟢)**: N · **Partial (🟡)**: N · **Not Applicable (⚪)**: N · **Capabilities impacted**: M of 47.Status / Rationale / Rules Triggered (verbatim) / Impacted Capabilities (verbatim bullet list with per-capability 🟢/🟡 status, rationale, PO Spec § citation, and a (not impacted: …) parenthetical) / Evidence / Owner Counterparts/sa-skills:architecture-docs and listing the gate-passed comment that will be embedded in docs/01-system-overview.mdWrite to ENTERPRISE_ALIGNMENT.md at the project root. Overwrite policy: regenerated fresh on each run (not date-stamped). If the user wants history, they archive previous versions in archive/ themselves.
Also embed the standard architecture-gate comment at the top of the file:
<!-- ENTERPRISE_ALIGNMENT_VERSION: 2.1 -->
<!-- ENTERPRISE_MODEL_SOURCE: [bundled default | project-local override] -->
<!-- PO_SPEC_SOURCE: [filename] -->
<!-- GENERATED: YYYY-MM-DD -->
Print summary:
✅ Enterprise Alignment generated.
PO Spec: [filename]
Enterprise Model: [bundled default | project-local override]
Domains impacted: N of 8 (🟢 N · 🟡 N · ⚪ N)
Capabilities impacted: M of 47
Cross-cutting gaps: N (Enterprise Management: ✅/🔴 · Finance & Risks: ✅/🔴 · Business Enabler: ✅/🔴)
Owners to engage before kickoff: N
Report: ENTERPRISE_ALIGNMENT.md
Next step:
Run /sa-skills:architecture-docs to begin architecture design.
Workflow 1 Step 0.3 (Enterprise Alignment Gate) will now pass.
| Skill | Relationship |
|-------|-------------|
| architecture-readiness | Prerequisite: PO Spec must exist. If missing, redirect to that skill. |
| architecture-docs | Consumer: Workflow 1 Step 0.3 BLOCKS until ENTERPRISE_ALIGNMENT.md exists. Embeds <!-- ENTERPRISE_ALIGNMENT_GATE: PASSED --> in docs/01-system-overview.md and lifts the Owner Engagement table into Section 1.5 "Enterprise Domain Alignment". |
| architecture-traceability | Complementary: traceability measures architecture coverage of PO Spec requirements; enterprise-alignment measures organizational scope of the initiative. Different lenses on the same PO Spec. |
| architecture-compliance | Downstream consumer: Compliance contracts can reference the impacted domains as scope. |
/skill architecture-enterprise-alignment
→ Maps the PO Spec onto the 8 enterprise domains (BIAN v14 capability map), writes ENTERPRISE_ALIGNMENT.md
"align with enterprise architecture"
→ Same as above
"enterprise domain mapping"
→ Same as above
"check enterprise alignment"
→ Same as above (also detects if ENTERPRISE_ALIGNMENT.md is stale relative to the PO Spec)
When this skill references a documented component (e.g., when the PO Spec mentions a specific system that already exists in docs/components/README.md), use the canonical full name exactly as it appears in the component index. Do not abbreviate or alias.
For enterprise domain names, use the verbatim domain name from ENTERPRISE_MODEL.md (e.g., write Finance & Risks — not Risks, Risk, or Risk Mgmt; write Business Enabler — not Enabler, Tech, or IT/Data). Capability names follow the same rule: cite the canonical English name exactly as it appears under the domain's **Capabilities** list in ENTERPRISE_MODEL.md (e.g., Customer Agreement & Contract Management, not Customer Contracts). Where the user-facing summary header benefits from brevity, the short label may be used in summary tables but the full name MUST appear in the per-domain section headings.
A successful alignment report produces:
ENTERPRISE_MODEL.md § 3, each bullet carrying per-capability status (🟢 / 🟡), one-line rationale, and PO Spec § citation**Impacted Capabilities** block closes with the (not impacted: <comma-separated remaining canonical capability names>) parenthetical so the reader can verify the classifier scanned the full domainCapabilities Impacted column with N/total counts (totals: 7 / 5 / 5 / 3 / 8 / 10 / 2 / 7) that match the per-domain **Impacted Capabilities** lists<!-- ENTERPRISE_ALIGNMENT_VERSION: 2.1 -->, <!-- PO_SPEC_SOURCE -->, <!-- GENERATED -->) are present and parseable by architecture-docs Step 0.3ENTERPRISE_ALIGNMENT.md renders correctly in GitHub / external markdown viewersarchitecture-docs Workflow 1 Step 0.3 passes when re-run after this skill completesdevelopment
Run risk and design-characteristics analyses over ARCHITECTURE.md documentation. Produces date-stamped reports in analysis/ covering ten lenses across two groups: HIGH-priority runtime/security — SPOF (single points of failure), Blast Radius (downstream cascade impact), Bottleneck (throughput chokepoints), Cost Hotspots (Pareto cost concentration), STRIDE (per-trust-boundary security threats); Strategic/sustainability — Vendor Lock-in (portability risk and exit cost), Latency Budget (per-hop SLO decomposition), Tech Debt/EOL (currency and deprecated tech), Coupling (fan-in/fan-out and cycles), Data Sensitivity (PII flow and encryption gaps). Each analysis can be requested individually, as a group, or all ten run in parallel. A consolidated Security Posture option (analysis 12) merges the STRIDE and Data Sensitivity reports into a single reviewer-fillable validation checklist of every security control to validate (markdown-only; exportable to a Word worksheet via architecture-docs-export). Output: analysis/<TYPE>-<YYYY-MM-DD>.md (default) OR analysis/<TYPE>-<YYYY-MM-DD>.html (interactive d3.js report; format is selected at runtime — Step 2.4). Requires ARCHITECTURE.md to exist (created by architecture-docs skill). Do NOT invoke for compliance contracts (use architecture-compliance), peer quality review (use architecture-peer-review), or ADR management (use architecture-definition-record).
development
On-demand export of architecture documents to professional Word (.docx) files. Exports are never automatic — invoke explicitly when ready to produce deliverables. Solution Architecture mode synthesizes an Executive Summary from docs/01-system-overview.md, the component index, and the compliance manifest (if present), then exports individual ADR docs. Handoff mode exports selected component development handoffs from handoffs/. Compliance mode exports selected compliance contracts from compliance-docs/. Security Posture mode exports the consolidated security validation checklist (analysis/SECURITY-POSTURE-<date>.md, from architecture-analysis) as a reviewer-fillable worksheet. IMPORTANT — this skill ONLY produces Word .docx files. It does NOT handle releasing, publishing, tagging, freezing, bumping, or finalizing an architecture version. For the Draft → Released lifecycle (git tag architecture-v{version}, archive snapshot, semver bump), use the `architecture-docs` skill (Workflow 10) instead. Do NOT invoke this skill when the user says "release my architecture", "release architecture", "publish architecture", "ship architecture", "tag architecture version", "freeze architecture", "bump architecture version", or "finalize architecture" — those route to `architecture-docs`.
testing
Generate Compliance Contracts (Contratos de Adherencia) from ARCHITECTURE.md files
testing
Use this skill whenever the user mentions deferred work, known compromises, shortcuts taken, "we'll fix this later," temporary workarounds, missing controls, or any architectural trade-off that should be made visible and tracked. Also trigger when arc42 Section 11 (Risks and Technical Debt) is being authored or updated, when a TDR / Technical Debt Record is requested by name, or when an ADR documents a decision that intentionally accepts debt. Do NOT use for general bug reports, feature requests, or backlog items — TDRs are for architectural or systemic compromises, not ordinary defects.