bmad-template/.codebuddy/skills/bmad-testarch-nfr/nfr-report-template.md

---
stepsCompleted: []
lastStep: ''
lastSaved: ''
workflowType: 'testarch-nfr-assess'
inputDocuments: []
---

# NFR Evidence Audit - {FEATURE_NAME}

**Date:** {DATE}
**Story:** {STORY_ID} (if applicable)
**Overall Status:** {OVERALL_STATUS} {STATUS_ICON}

---

Note: This audit summarizes existing implementation evidence; it does not run tests or CI workflows. NFR thresholds and planned evidence should come from PRD, architecture, and `test-design` outputs where available.

## Executive Summary

**Assessment:** {PASS_COUNT} PASS, {CONCERNS_COUNT} CONCERNS, {FAIL_COUNT} FAIL

**Blockers:** {BLOCKER_COUNT} {BLOCKER_DESCRIPTION}

**High Priority Issues:** {HIGH_PRIORITY_COUNT} {HIGH_PRIORITY_DESCRIPTION}

**Recommendation:** {OVERALL_RECOMMENDATION}

---

## Performance Assessment

### Response Time (p95)

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE}
- **Actual:** {ACTUAL_VALUE}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

### Throughput

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE}
- **Actual:** {ACTUAL_VALUE}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

### Resource Usage

- **CPU Usage**
  - **Status:** {STATUS} {STATUS_ICON}
  - **Threshold:** {THRESHOLD_VALUE}
  - **Actual:** {ACTUAL_VALUE}
  - **Evidence:** {EVIDENCE_SOURCE}

- **Memory Usage**
  - **Status:** {STATUS} {STATUS_ICON}
  - **Threshold:** {THRESHOLD_VALUE}
  - **Actual:** {ACTUAL_VALUE}
  - **Evidence:** {EVIDENCE_SOURCE}

### Scalability

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION}
- **Actual:** {ACTUAL_DESCRIPTION}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

---

## Security Assessment

### Authentication Strength

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION}
- **Actual:** {ACTUAL_DESCRIPTION}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}
- **Recommendation:** {RECOMMENDATION} (if CONCERNS or FAIL)

### Authorization Controls

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION}
- **Actual:** {ACTUAL_DESCRIPTION}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

### Data Protection

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION}
- **Actual:** {ACTUAL_DESCRIPTION}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

### Vulnerability Management

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION} (e.g., "0 critical, <3 high vulnerabilities")
- **Actual:** {ACTUAL_DESCRIPTION} (e.g., "0 critical, 1 high, 5 medium vulnerabilities")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "Snyk scan results - scan-2025-10-14.json")
- **Findings:** {FINDINGS_DESCRIPTION}

### Compliance (if applicable)

- **Status:** {STATUS} {STATUS_ICON}
- **Standards:** {COMPLIANCE_STANDARDS} (e.g., "GDPR, HIPAA, PCI-DSS")
- **Actual:** {ACTUAL_COMPLIANCE_STATUS}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

---

## Reliability Assessment

### Availability (Uptime)

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE} (e.g., "99.9%")
- **Actual:** {ACTUAL_VALUE} (e.g., "99.95%")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "Uptime monitoring - uptime-report-2025-10-14.csv")
- **Findings:** {FINDINGS_DESCRIPTION}

### Error Rate

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE} (e.g., "<0.1%")
- **Actual:** {ACTUAL_VALUE} (e.g., "0.05%")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "Error logs - logs/errors-2025-10.log")
- **Findings:** {FINDINGS_DESCRIPTION}

### MTTR (Mean Time To Recovery)

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE} (e.g., "<15 minutes")
- **Actual:** {ACTUAL_VALUE} (e.g., "12 minutes")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "Incident reports - incidents/")
- **Findings:** {FINDINGS_DESCRIPTION}

### Fault Tolerance

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION}
- **Actual:** {ACTUAL_DESCRIPTION}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

### CI Burn-In (Stability)

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE} (e.g., "100 consecutive successful runs")
- **Actual:** {ACTUAL_VALUE} (e.g., "150 consecutive successful runs")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "CI burn-in results - ci-burn-in-2025-10-14.log")
- **Findings:** {FINDINGS_DESCRIPTION}

### Disaster Recovery (if applicable)

- **RTO (Recovery Time Objective)**
  - **Status:** {STATUS} {STATUS_ICON}
  - **Threshold:** {THRESHOLD_VALUE}
  - **Actual:** {ACTUAL_VALUE}
  - **Evidence:** {EVIDENCE_SOURCE}

- **RPO (Recovery Point Objective)**
  - **Status:** {STATUS} {STATUS_ICON}
  - **Threshold:** {THRESHOLD_VALUE}
  - **Actual:** {ACTUAL_VALUE}
  - **Evidence:** {EVIDENCE_SOURCE}

---

## Maintainability Assessment

### Test Coverage

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE} (e.g., ">=80%")
- **Actual:** {ACTUAL_VALUE} (e.g., "87%")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "Coverage report - coverage/lcov-report/index.html")
- **Findings:** {FINDINGS_DESCRIPTION}

### Code Quality

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE} (e.g., ">=85/100")
- **Actual:** {ACTUAL_VALUE} (e.g., "92/100")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "SonarQube analysis - sonarqube-report-2025-10-14.pdf")
- **Findings:** {FINDINGS_DESCRIPTION}

### Technical Debt

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE} (e.g., "<5% debt ratio")
- **Actual:** {ACTUAL_VALUE} (e.g., "3.2% debt ratio")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "CodeClimate analysis - codeclimate-2025-10-14.json")
- **Findings:** {FINDINGS_DESCRIPTION}

### Documentation Completeness

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_VALUE} (e.g., ">=90%")
- **Actual:** {ACTUAL_VALUE} (e.g., "95%")
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "Documentation audit - docs-audit-2025-10-14.md")
- **Findings:** {FINDINGS_DESCRIPTION}

### Test Quality (from test-review, if available)

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION}
- **Actual:** {ACTUAL_DESCRIPTION}
- **Evidence:** {EVIDENCE_SOURCE} (e.g., "Test review report - test-review-2025-10-14.md")
- **Findings:** {FINDINGS_DESCRIPTION}

---

## Custom NFR Evidence Audits (if applicable)

### {CUSTOM_NFR_NAME_1}

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION}
- **Actual:** {ACTUAL_DESCRIPTION}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

### {CUSTOM_NFR_NAME_2}

- **Status:** {STATUS} {STATUS_ICON}
- **Threshold:** {THRESHOLD_DESCRIPTION}
- **Actual:** {ACTUAL_DESCRIPTION}
- **Evidence:** {EVIDENCE_SOURCE}
- **Findings:** {FINDINGS_DESCRIPTION}

---

## Quick Wins

{QUICK_WIN_COUNT} quick wins identified for immediate implementation:

1. **{QUICK_WIN_TITLE_1}** ({NFR_CATEGORY}) - {PRIORITY} - {ESTIMATED_EFFORT}
   - {QUICK_WIN_DESCRIPTION}
   - No code changes needed / Minimal code changes

2. **{QUICK_WIN_TITLE_2}** ({NFR_CATEGORY}) - {PRIORITY} - {ESTIMATED_EFFORT}
   - {QUICK_WIN_DESCRIPTION}

---

## Recommended Actions

### Immediate (Before Release) - CRITICAL/HIGH Priority

1. **{ACTION_TITLE_1}** - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
   - {ACTION_DESCRIPTION}
   - {SPECIFIC_STEPS}
   - {VALIDATION_CRITERIA}

2. **{ACTION_TITLE_2}** - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
   - {ACTION_DESCRIPTION}
   - {SPECIFIC_STEPS}
   - {VALIDATION_CRITERIA}

### Short-term (Next Milestone) - MEDIUM Priority

1. **{ACTION_TITLE_3}** - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
   - {ACTION_DESCRIPTION}

2. **{ACTION_TITLE_4}** - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
   - {ACTION_DESCRIPTION}

### Long-term (Backlog) - LOW Priority

1. **{ACTION_TITLE_5}** - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
   - {ACTION_DESCRIPTION}

---

## Monitoring Hooks

{MONITORING_HOOK_COUNT} monitoring hooks recommended to detect issues before failures:

### Performance Monitoring

- [ ] {MONITORING_TOOL_1} - {MONITORING_DESCRIPTION}
  - **Owner:** {OWNER}
  - **Deadline:** {DEADLINE}

- [ ] {MONITORING_TOOL_2} - {MONITORING_DESCRIPTION}
  - **Owner:** {OWNER}
  - **Deadline:** {DEADLINE}

### Security Monitoring

- [ ] {MONITORING_TOOL_3} - {MONITORING_DESCRIPTION}
  - **Owner:** {OWNER}
  - **Deadline:** {DEADLINE}

### Reliability Monitoring

- [ ] {MONITORING_TOOL_4} - {MONITORING_DESCRIPTION}
  - **Owner:** {OWNER}
  - **Deadline:** {DEADLINE}

### Alerting Thresholds

- [ ] {ALERT_DESCRIPTION} - Notify when {THRESHOLD_CONDITION}
  - **Owner:** {OWNER}
  - **Deadline:** {DEADLINE}

---

## Fail-Fast Mechanisms

{FAIL_FAST_COUNT} fail-fast mechanisms recommended to prevent failures:

### Circuit Breakers (Reliability)

- [ ] {CIRCUIT_BREAKER_DESCRIPTION}
  - **Owner:** {OWNER}
  - **Estimated Effort:** {EFFORT}

### Rate Limiting (Performance)

- [ ] {RATE_LIMITING_DESCRIPTION}
  - **Owner:** {OWNER}
  - **Estimated Effort:** {EFFORT}

### Validation Gates (Security)

- [ ] {VALIDATION_GATE_DESCRIPTION}
  - **Owner:** {OWNER}
  - **Estimated Effort:** {EFFORT}

### Smoke Tests (Maintainability)

- [ ] {SMOKE_TEST_DESCRIPTION}
  - **Owner:** {OWNER}
  - **Estimated Effort:** {EFFORT}

---

## Evidence Gaps

{EVIDENCE_GAP_COUNT} evidence gaps identified - action required:

- [ ] **{NFR_NAME_1}** ({NFR_CATEGORY})
  - **Owner:** {OWNER}
  - **Deadline:** {DEADLINE}
  - **Suggested Evidence:** {SUGGESTED_EVIDENCE_SOURCE}
  - **Impact:** {IMPACT_DESCRIPTION}

- [ ] **{NFR_NAME_2}** ({NFR_CATEGORY})
  - **Owner:** {OWNER}
  - **Deadline:** {DEADLINE}
  - **Suggested Evidence:** {SUGGESTED_EVIDENCE_SOURCE}
  - **Impact:** {IMPACT_DESCRIPTION}

---

## Findings Summary

**Based on ADR Quality Readiness Checklist (8 categories, 29 criteria)**

| Category                                         | Criteria Met       | PASS             | CONCERNS             | FAIL             | Overall Status                      |
| ------------------------------------------------ | ------------------ | ---------------- | -------------------- | ---------------- | ----------------------------------- |
| 1. Testability & Automation                      | {T_MET}/4          | {T_PASS}         | {T_CONCERNS}         | {T_FAIL}         | {T_STATUS} {T_ICON}                 |
| 2. Test Data Strategy                            | {TD_MET}/3         | {TD_PASS}        | {TD_CONCERNS}        | {TD_FAIL}        | {TD_STATUS} {TD_ICON}               |
| 3. Scalability & Availability                    | {SA_MET}/4         | {SA_PASS}        | {SA_CONCERNS}        | {SA_FAIL}        | {SA_STATUS} {SA_ICON}               |
| 4. Disaster Recovery                             | {DR_MET}/3         | {DR_PASS}        | {DR_CONCERNS}        | {DR_FAIL}        | {DR_STATUS} {DR_ICON}               |
| 5. Security                                      | {SEC_MET}/4        | {SEC_PASS}       | {SEC_CONCERNS}       | {SEC_FAIL}       | {SEC_STATUS} {SEC_ICON}             |
| 6. Monitorability, Debuggability & Manageability | {MON_MET}/4        | {MON_PASS}       | {MON_CONCERNS}       | {MON_FAIL}       | {MON_STATUS} {MON_ICON}             |
| 7. QoS & QoE                                     | {QOS_MET}/4        | {QOS_PASS}       | {QOS_CONCERNS}       | {QOS_FAIL}       | {QOS_STATUS} {QOS_ICON}             |
| 8. Deployability                                 | {DEP_MET}/3        | {DEP_PASS}       | {DEP_CONCERNS}       | {DEP_FAIL}       | {DEP_STATUS} {DEP_ICON}             |
| **Total**                                        | **{TOTAL_MET}/29** | **{TOTAL_PASS}** | **{TOTAL_CONCERNS}** | **{TOTAL_FAIL}** | **{OVERALL_STATUS} {OVERALL_ICON}** |

**Criteria Met Scoring:**

- ≥26/29 (90%+) = Strong foundation
- 20-25/29 (69-86%) = Room for improvement
- <20/29 (<69%) = Significant gaps

---

## Gate YAML Snippet

```yaml
nfr_assessment:
  date: '{DATE}'
  story_id: '{STORY_ID}'
  feature_name: '{FEATURE_NAME}'
  adr_checklist_score: '{TOTAL_MET}/29' # ADR Quality Readiness Checklist
  categories:
    testability_automation: '{T_STATUS}'
    test_data_strategy: '{TD_STATUS}'
    scalability_availability: '{SA_STATUS}'
    disaster_recovery: '{DR_STATUS}'
    security: '{SEC_STATUS}'
    monitorability: '{MON_STATUS}'
    qos_qoe: '{QOS_STATUS}'
    deployability: '{DEP_STATUS}'
  overall_status: '{OVERALL_STATUS}'
  critical_issues: { CRITICAL_COUNT }
  high_priority_issues: { HIGH_COUNT }
  medium_priority_issues: { MEDIUM_COUNT }
  concerns: { CONCERNS_COUNT }
  blockers: { BLOCKER_BOOLEAN } # true/false
  quick_wins: { QUICK_WIN_COUNT }
  evidence_gaps: { EVIDENCE_GAP_COUNT }
  recommendations:
    - '{RECOMMENDATION_1}'
    - '{RECOMMENDATION_2}'
    - '{RECOMMENDATION_3}'
```

---

## Related Artifacts

- **Story File:** {STORY_FILE_PATH} (if applicable)
- **Tech Spec:** {TECH_SPEC_PATH} (if available)
- **PRD:** {PRD_PATH} (if available)
- **Test Design:** {TEST_DESIGN_PATH} (if available)
- **Evidence Sources:**
  - Test Results: {TEST_RESULTS_DIR}
  - Metrics: {METRICS_DIR}
  - Logs: {LOGS_DIR}
  - CI Results: {CI_RESULTS_PATH}

---

## Recommendations Summary

**Release Blocker:** {RELEASE_BLOCKER_SUMMARY}

**High Priority:** {HIGH_PRIORITY_SUMMARY}

**Medium Priority:** {MEDIUM_PRIORITY_SUMMARY}

**Next Steps:** {NEXT_STEPS_DESCRIPTION}

---

## Sign-Off

**NFR Evidence Audit:**

- Overall Status: {OVERALL_STATUS} {OVERALL_ICON}
- Critical Issues: {CRITICAL_COUNT}
- High Priority Issues: {HIGH_COUNT}
- Concerns: {CONCERNS_COUNT}
- Evidence Gaps: {EVIDENCE_GAP_COUNT}

**Gate Status:** {GATE_STATUS} {GATE_ICON}

**Next Actions:**

- If PASS ✅: Proceed to `*gate` workflow or release
- If CONCERNS ⚠️: Address HIGH/CRITICAL issues, re-run `*nfr-assess`
- If FAIL ❌: Resolve FAIL status NFRs, re-run `*nfr-assess`

**Generated:** {DATE}
**Workflow:** testarch-nfr v5.0

---

<!-- Powered by BMAD-CORE™ -->