Ви не можете вибрати більше 25 тем Теми мають розпочинатися з літери або цифри, можуть містити дефіси (-) і не повинні перевищувати 35 символів.

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363
  1. ---
  2. workflowStatus: ''
  3. totalSteps: 5
  4. stepsCompleted: []
  5. lastStep: ''
  6. nextStep: ''
  7. lastSaved: ''
  8. ---
  9. # Test Design: Epic {epic_num} - {epic_title}
  10. **Date:** {date}
  11. **Author:** {user_name}
  12. **Status:** Draft / Approved
  13. ---
  14. ## Executive Summary
  15. **Scope:** {design_level} test design for Epic {epic_num}
  16. **Risk Summary:**
  17. - Total risks identified: {total_risks}
  18. - High-priority risks (≥6): {high_priority_count}
  19. - Critical categories: {top_categories}
  20. **Coverage Summary:**
  21. - P0 scenarios: {p0_count} ({p0_hours} hours)
  22. - P1 scenarios: {p1_count} ({p1_hours} hours)
  23. - P2/P3 scenarios: {p2p3_count} ({p2p3_hours} hours)
  24. - **Total effort**: {total_hours} hours (~{total_days} days)
  25. ---
  26. ## Not in Scope
  27. | Item | Reasoning | Mitigation |
  28. | ---------- | -------------- | --------------------- |
  29. | **{Item}** | {Why excluded} | {How risk is handled} |
  30. ---
  31. ## Risk Assessment
  32. ### High-Priority Risks (Score ≥6)
  33. | Risk ID | Category | Description | Probability | Impact | Score | Mitigation | Owner | Timeline |
  34. | ------- | -------- | ------------- | ----------- | ------ | ----- | ------------ | ------- | -------- |
  35. | R-001 | SEC | {description} | 2 | 3 | 6 | {mitigation} | {owner} | {date} |
  36. | R-002 | PERF | {description} | 3 | 2 | 6 | {mitigation} | {owner} | {date} |
  37. ### Medium-Priority Risks (Score 3-4)
  38. | Risk ID | Category | Description | Probability | Impact | Score | Mitigation | Owner |
  39. | ------- | -------- | ------------- | ----------- | ------ | ----- | ------------ | ------- |
  40. | R-003 | TECH | {description} | 2 | 2 | 4 | {mitigation} | {owner} |
  41. | R-004 | DATA | {description} | 1 | 3 | 3 | {mitigation} | {owner} |
  42. ### Low-Priority Risks (Score 1-2)
  43. | Risk ID | Category | Description | Probability | Impact | Score | Action |
  44. | ------- | -------- | ------------- | ----------- | ------ | ----- | ------- |
  45. | R-005 | OPS | {description} | 1 | 2 | 2 | Monitor |
  46. | R-006 | BUS | {description} | 1 | 1 | 1 | Monitor |
  47. ### Risk Category Legend
  48. - **TECH**: Technical/Architecture (flaws, integration, scalability)
  49. - **SEC**: Security (access controls, auth, data exposure)
  50. - **PERF**: Performance (SLA violations, degradation, resource limits)
  51. - **DATA**: Data Integrity (loss, corruption, inconsistency)
  52. - **BUS**: Business Impact (UX harm, logic errors, revenue)
  53. - **OPS**: Operations (deployment, config, monitoring)
  54. ---
  55. ## NFR Planning
  56. **Purpose:** Capture epic-specific NFR thresholds, planned validation, and evidence expected for later `nfr-assess`. This is not a final evidence audit.
  57. | NFR Category | Requirement / Threshold | Risk Link | Planned Validation | Evidence Needed |
  58. | --------------- | ----------------------- | --------- | ------------------------------------------ | -------------------------------- |
  59. | Security | {Requirement} | {R-ID} | {API/E2E/SAST/DAST validation} | {Test report, scan, audit log} |
  60. | Performance | {Requirement} | {R-ID} | {Load/stress/baseline validation} | {k6/APM/Lighthouse report} |
  61. | Reliability | {Requirement} | {R-ID} | {Error/retry/failover validation} | {Burn-in, logs, monitoring data} |
  62. | Maintainability | {Requirement} | {R-ID} | {Coverage/static analysis/docs validation} | {Coverage or quality report} |
  63. **Unknown thresholds:** {List missing NFR thresholds or mark N/A. Do not invent values.}
  64. ---
  65. ## Entry Criteria
  66. - [ ] Requirements and assumptions agreed upon by QA, Dev, PM
  67. - [ ] Test environment provisioned and accessible
  68. - [ ] Test data available or factories ready
  69. - [ ] Feature deployed to test environment
  70. - [ ] {Epic-specific entry criteria}
  71. ## Exit Criteria
  72. - [ ] All P0 tests passing
  73. - [ ] All P1 tests passing (or failures triaged)
  74. - [ ] No open high-priority / high-severity bugs
  75. - [ ] Test coverage agreed as sufficient
  76. - [ ] {Epic-specific exit criteria}
  77. ## Project Team (Optional)
  78. **Include only if roles/names are known or responsibility mapping is needed; otherwise omit.**
  79. | Name | Role | Testing Responsibilities |
  80. | ------ | -------- | ------------------------ |
  81. | {Name} | QA Lead | {Responsibilities} |
  82. | {Name} | Dev Lead | {Responsibilities} |
  83. | {Name} | PM | {Responsibilities} |
  84. ---
  85. ## Test Coverage Plan
  86. ### P0 (Critical) - Run on every commit
  87. **Criteria**: Blocks core journey + High risk (≥6) + No workaround
  88. | Requirement | Test Level | Risk Link | Test Count | Owner | Notes |
  89. | ------------- | ---------- | --------- | ---------- | ----- | ------- |
  90. | {requirement} | E2E | R-001 | 3 | QA | {notes} |
  91. | {requirement} | API | R-002 | 5 | QA | {notes} |
  92. **Total P0**: {p0_count} tests, {p0_hours} hours
  93. ### P1 (High) - Run on PR to main
  94. **Criteria**: Important features + Medium risk (3-4) + Common workflows
  95. | Requirement | Test Level | Risk Link | Test Count | Owner | Notes |
  96. | ------------- | ---------- | --------- | ---------- | ----- | ------- |
  97. | {requirement} | API | R-003 | 4 | QA | {notes} |
  98. | {requirement} | Component | - | 6 | DEV | {notes} |
  99. **Total P1**: {p1_count} tests, {p1_hours} hours
  100. ### P2 (Medium) - Run nightly/weekly
  101. **Criteria**: Secondary features + Low risk (1-2) + Edge cases
  102. | Requirement | Test Level | Risk Link | Test Count | Owner | Notes |
  103. | ------------- | ---------- | --------- | ---------- | ----- | ------- |
  104. | {requirement} | API | R-004 | 8 | QA | {notes} |
  105. | {requirement} | Unit | - | 15 | DEV | {notes} |
  106. **Total P2**: {p2_count} tests, {p2_hours} hours
  107. ### P3 (Low) - Run on-demand
  108. **Criteria**: Nice-to-have + Exploratory + Performance benchmarks
  109. | Requirement | Test Level | Test Count | Owner | Notes |
  110. | ------------- | ---------- | ---------- | ----- | ------- |
  111. | {requirement} | E2E | 2 | QA | {notes} |
  112. | {requirement} | Unit | 8 | DEV | {notes} |
  113. **Total P3**: {p3_count} tests, {p3_hours} hours
  114. ---
  115. ## Execution Order
  116. ### Smoke Tests (<5 min)
  117. **Purpose**: Fast feedback, catch build-breaking issues
  118. - [ ] {scenario} (30s)
  119. - [ ] {scenario} (45s)
  120. - [ ] {scenario} (1min)
  121. **Total**: {smoke_count} scenarios
  122. ### P0 Tests (<10 min)
  123. **Purpose**: Critical path validation
  124. - [ ] {scenario} (E2E)
  125. - [ ] {scenario} (API)
  126. - [ ] {scenario} (API)
  127. **Total**: {p0_count} scenarios
  128. ### P1 Tests (<30 min)
  129. **Purpose**: Important feature coverage
  130. - [ ] {scenario} (API)
  131. - [ ] {scenario} (Component)
  132. **Total**: {p1_count} scenarios
  133. ### P2/P3 Tests (<60 min)
  134. **Purpose**: Full regression coverage
  135. - [ ] {scenario} (Unit)
  136. - [ ] {scenario} (API)
  137. **Total**: {p2p3_count} scenarios
  138. ---
  139. ## Resource Estimates
  140. ### Test Development Effort
  141. | Priority | Count | Hours/Test | Total Hours | Notes |
  142. | --------- | ----------------- | ---------- | ----------------- | ----------------------- |
  143. | P0 | {p0_count} | 2.0 | {p0_hours} | Complex setup, security |
  144. | P1 | {p1_count} | 1.0 | {p1_hours} | Standard coverage |
  145. | P2 | {p2_count} | 0.5 | {p2_hours} | Simple scenarios |
  146. | P3 | {p3_count} | 0.25 | {p3_hours} | Exploratory |
  147. | **Total** | **{total_count}** | **-** | **{total_hours}** | **~{total_days} days** |
  148. ### Prerequisites
  149. **Test Data:**
  150. - {factory_name} factory (faker-based, auto-cleanup)
  151. - {fixture_name} fixture (setup/teardown)
  152. **Tooling:**
  153. - {tool} for {purpose}
  154. - {tool} for {purpose}
  155. **Environment:**
  156. - {env_requirement}
  157. - {env_requirement}
  158. ---
  159. ## Quality Gate Criteria
  160. ### Pass/Fail Thresholds
  161. - **P0 pass rate**: 100% (no exceptions)
  162. - **P1 pass rate**: ≥95% (waivers required for failures)
  163. - **P2/P3 pass rate**: ≥90% (informational)
  164. - **High-risk mitigations**: 100% complete or approved waivers
  165. ### Coverage Targets
  166. - **Critical paths**: ≥80%
  167. - **Security scenarios**: 100%
  168. - **Business logic**: ≥70%
  169. - **Edge cases**: ≥50%
  170. ### Non-Negotiable Requirements
  171. - [ ] All P0 tests pass
  172. - [ ] No high-risk (≥6) items unmitigated
  173. - [ ] Security tests (SEC category) pass 100%
  174. - [ ] Performance targets met (PERF category)
  175. - [ ] Planned NFR evidence exists or `nfr-assess` has documented CONCERNS/waivers
  176. ---
  177. ## Mitigation Plans
  178. ### R-001: {Risk Description} (Score: 6)
  179. **Mitigation Strategy:** {detailed_mitigation}
  180. **Owner:** {owner}
  181. **Timeline:** {date}
  182. **Status:** Planned / In Progress / Complete
  183. **Verification:** {how_to_verify}
  184. ### R-002: {Risk Description} (Score: 6)
  185. **Mitigation Strategy:** {detailed_mitigation}
  186. **Owner:** {owner}
  187. **Timeline:** {date}
  188. **Status:** Planned / In Progress / Complete
  189. **Verification:** {how_to_verify}
  190. ---
  191. ## Assumptions and Dependencies
  192. ### Assumptions
  193. 1. {assumption}
  194. 2. {assumption}
  195. 3. {assumption}
  196. ### Dependencies
  197. 1. {dependency} - Required by {date}
  198. 2. {dependency} - Required by {date}
  199. ### Risks to Plan
  200. - **Risk**: {risk_to_plan}
  201. - **Impact**: {impact}
  202. - **Contingency**: {contingency}
  203. ---
  204. ---
  205. ## Follow-on Workflows (Manual)
  206. - Run `*atdd` to generate failing P0 tests (separate workflow; not auto-run).
  207. - Run `*automate` for broader coverage once implementation exists.
  208. ---
  209. ## Approval
  210. **Test Design Approved By:**
  211. - [ ] Product Manager: {name} Date: {date}
  212. - [ ] Tech Lead: {name} Date: {date}
  213. - [ ] QA Lead: {name} Date: {date}
  214. **Comments:**
  215. ---
  216. ---
  217. ---
  218. ## Interworking & Regression
  219. | Service/Component | Impact | Regression Scope |
  220. | ----------------- | -------------- | ------------------------------- |
  221. | **{Service}** | {How affected} | {Existing tests that must pass} |
  222. ---
  223. ## Appendix
  224. ### Knowledge Base References
  225. - `risk-governance.md` - Risk classification framework
  226. - `probability-impact.md` - Risk scoring methodology
  227. - `test-levels-framework.md` - Test level selection
  228. - `test-priorities-matrix.md` - P0-P3 prioritization
  229. ### Related Documents
  230. - PRD: {prd_link}
  231. - Epic: {epic_link}
  232. - Architecture: {arch_link}
  233. - Tech Spec: {tech_spec_link}
  234. ---
  235. **Generated by**: BMad TEA Agent - Test Architect Module
  236. **Workflow**: `bmad-testarch-test-design`
  237. **Version**: 4.0 (BMad v6)