stepsCompleted: []
lastStep: “
lastSaved: “
workflowType: ‘testarch-nfr-assess’
NFR Evidence Audit - {FEATURE_NAME}
Date: {DATE}
Story: {STORY_ID} (if applicable)
Overall Status: {OVERALL_STATUS} {STATUS_ICON}
Note: This audit summarizes existing implementation evidence; it does not run tests or CI workflows. NFR thresholds and planned evidence should come from PRD, architecture, and test-design outputs where available.
Executive Summary
Assessment: {PASS_COUNT} PASS, {CONCERNS_COUNT} CONCERNS, {FAIL_COUNT} FAIL
Blockers: {BLOCKER_COUNT} {BLOCKER_DESCRIPTION}
High Priority Issues: {HIGH_PRIORITY_COUNT} {HIGH_PRIORITY_DESCRIPTION}
Recommendation: {OVERALL_RECOMMENDATION}
Response Time (p95)
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE}
- Actual: {ACTUAL_VALUE}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
Throughput
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE}
- Actual: {ACTUAL_VALUE}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
Resource Usage
CPU Usage
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE}
- Actual: {ACTUAL_VALUE}
- Evidence: {EVIDENCE_SOURCE}
Memory Usage
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE}
- Actual: {ACTUAL_VALUE}
- Evidence: {EVIDENCE_SOURCE}
Scalability
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION}
- Actual: {ACTUAL_DESCRIPTION}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
Security Assessment
Authentication Strength
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION}
- Actual: {ACTUAL_DESCRIPTION}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
- Recommendation: {RECOMMENDATION} (if CONCERNS or FAIL)
Authorization Controls
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION}
- Actual: {ACTUAL_DESCRIPTION}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
Data Protection
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION}
- Actual: {ACTUAL_DESCRIPTION}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
Vulnerability Management
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION} (e.g., “0 critical, <3 high vulnerabilities”)
- Actual: {ACTUAL_DESCRIPTION} (e.g., “0 critical, 1 high, 5 medium vulnerabilities”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “Snyk scan results - scan-2025-10-14.json”)
- Findings: {FINDINGS_DESCRIPTION}
Compliance (if applicable)
- Status: {STATUS} {STATUS_ICON}
- Standards: {COMPLIANCE_STANDARDS} (e.g., “GDPR, HIPAA, PCI-DSS”)
- Actual: {ACTUAL_COMPLIANCE_STATUS}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
Reliability Assessment
Availability (Uptime)
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE} (e.g., “99.9%”)
- Actual: {ACTUAL_VALUE} (e.g., “99.95%”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “Uptime monitoring - uptime-report-2025-10-14.csv”)
- Findings: {FINDINGS_DESCRIPTION}
Error Rate
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE} (e.g., “<0.1%“)
- Actual: {ACTUAL_VALUE} (e.g., “0.05%”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “Error logs - logs/errors-2025-10.log”)
- Findings: {FINDINGS_DESCRIPTION}
MTTR (Mean Time To Recovery)
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE} (e.g., “<15 minutes”)
- Actual: {ACTUAL_VALUE} (e.g., “12 minutes”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “Incident reports - incidents/”)
- Findings: {FINDINGS_DESCRIPTION}
Fault Tolerance
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION}
- Actual: {ACTUAL_DESCRIPTION}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
CI Burn-In (Stability)
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE} (e.g., “100 consecutive successful runs”)
- Actual: {ACTUAL_VALUE} (e.g., “150 consecutive successful runs”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “CI burn-in results - ci-burn-in-2025-10-14.log”)
- Findings: {FINDINGS_DESCRIPTION}
Disaster Recovery (if applicable)
Maintainability Assessment
Test Coverage
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE} (e.g., “>=80%”)
- Actual: {ACTUAL_VALUE} (e.g., “87%”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “Coverage report - coverage/lcov-report/index.html”)
- Findings: {FINDINGS_DESCRIPTION}
Code Quality
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE} (e.g., “>=85/100”)
- Actual: {ACTUAL_VALUE} (e.g., “92/100”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “SonarQube analysis - sonarqube-report-2025-10-14.pdf”)
- Findings: {FINDINGS_DESCRIPTION}
Technical Debt
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE} (e.g., “<5% debt ratio”)
- Actual: {ACTUAL_VALUE} (e.g., “3.2% debt ratio”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “CodeClimate analysis - codeclimate-2025-10-14.json”)
- Findings: {FINDINGS_DESCRIPTION}
Documentation Completeness
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_VALUE} (e.g., “>=90%”)
- Actual: {ACTUAL_VALUE} (e.g., “95%”)
- Evidence: {EVIDENCE_SOURCE} (e.g., “Documentation audit - docs-audit-2025-10-14.md”)
- Findings: {FINDINGS_DESCRIPTION}
Test Quality (from test-review, if available)
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION}
- Actual: {ACTUAL_DESCRIPTION}
- Evidence: {EVIDENCE_SOURCE} (e.g., “Test review report - test-review-2025-10-14.md”)
- Findings: {FINDINGS_DESCRIPTION}
Custom NFR Evidence Audits (if applicable)
{CUSTOM_NFR_NAME_1}
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION}
- Actual: {ACTUAL_DESCRIPTION}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
{CUSTOM_NFR_NAME_2}
- Status: {STATUS} {STATUS_ICON}
- Threshold: {THRESHOLD_DESCRIPTION}
- Actual: {ACTUAL_DESCRIPTION}
- Evidence: {EVIDENCE_SOURCE}
- Findings: {FINDINGS_DESCRIPTION}
Quick Wins
{QUICK_WIN_COUNT} quick wins identified for immediate implementation:
{QUICK_WIN_TITLE_1} ({NFR_CATEGORY}) - {PRIORITY} - {ESTIMATED_EFFORT}
- {QUICK_WIN_DESCRIPTION}
- No code changes needed / Minimal code changes
{QUICK_WIN_TITLE_2} ({NFR_CATEGORY}) - {PRIORITY} - {ESTIMATED_EFFORT}
Recommended Actions
{ACTION_TITLE_1} - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
- {ACTION_DESCRIPTION}
- {SPECIFIC_STEPS}
- {VALIDATION_CRITERIA}
{ACTION_TITLE_2} - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
- {ACTION_DESCRIPTION}
- {SPECIFIC_STEPS}
- {VALIDATION_CRITERIA}
Short-term (Next Milestone) - MEDIUM Priority
{ACTION_TITLE_3} - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
{ACTION_TITLE_4} - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
Long-term (Backlog) - LOW Priority
- {ACTION_TITLE_5} - {PRIORITY} - {ESTIMATED_EFFORT} - {OWNER}
Monitoring Hooks
{MONITORING_HOOK_COUNT} monitoring hooks recommended to detect issues before failures:
Security Monitoring
Reliability Monitoring
Alerting Thresholds
Fail-Fast Mechanisms
{FAIL_FAST_COUNT} fail-fast mechanisms recommended to prevent failures:
Circuit Breakers (Reliability)
Validation Gates (Security)
Smoke Tests (Maintainability)
Evidence Gaps
{EVIDENCE_GAP_COUNT} evidence gaps identified - action required:
Findings Summary
Based on ADR Quality Readiness Checklist (8 categories, 29 criteria)
| Category |
Criteria Met |
PASS |
CONCERNS |
FAIL |
Overall Status |
| 1. Testability & Automation |
{T_MET}/4 |
{T_PASS} |
{T_CONCERNS} |
{T_FAIL} |
{T_STATUS} {T_ICON} |
| 2. Test Data Strategy |
{TD_MET}/3 |
{TD_PASS} |
{TD_CONCERNS} |
{TD_FAIL} |
{TD_STATUS} {TD_ICON} |
| 3. Scalability & Availability |
{SA_MET}/4 |
{SA_PASS} |
{SA_CONCERNS} |
{SA_FAIL} |
{SA_STATUS} {SA_ICON} |
| 4. Disaster Recovery |
{DR_MET}/3 |
{DR_PASS} |
{DR_CONCERNS} |
{DR_FAIL} |
{DR_STATUS} {DR_ICON} |
| 5. Security |
{SEC_MET}/4 |
{SEC_PASS} |
{SEC_CONCERNS} |
{SEC_FAIL} |
{SEC_STATUS} {SEC_ICON} |
| 6. Monitorability, Debuggability & Manageability |
{MON_MET}/4 |
{MON_PASS} |
{MON_CONCERNS} |
{MON_FAIL} |
{MON_STATUS} {MON_ICON} |
| 7. QoS & QoE |
{QOS_MET}/4 |
{QOS_PASS} |
{QOS_CONCERNS} |
{QOS_FAIL} |
{QOS_STATUS} {QOS_ICON} |
| 8. Deployability |
{DEP_MET}/3 |
{DEP_PASS} |
{DEP_CONCERNS} |
{DEP_FAIL} |
{DEP_STATUS} {DEP_ICON} |
| Total |
{TOTAL_MET}/29 |
{TOTAL_PASS} |
{TOTAL_CONCERNS} |
{TOTAL_FAIL} |
{OVERALL_STATUS} {OVERALL_ICON} |
Criteria Met Scoring:
- ≥26/29 (90%+) = Strong foundation
- 20-25/29 (69-86%) = Room for improvement
- <20/29 (<69%) = Significant gaps
Gate YAML Snippet
nfr_assessment:
date: '{DATE}'
story_id: '{STORY_ID}'
feature_name: '{FEATURE_NAME}'
adr_checklist_score: '{TOTAL_MET}/29' # ADR Quality Readiness Checklist
categories:
testability_automation: '{T_STATUS}'
test_data_strategy: '{TD_STATUS}'
scalability_availability: '{SA_STATUS}'
disaster_recovery: '{DR_STATUS}'
security: '{SEC_STATUS}'
monitorability: '{MON_STATUS}'
qos_qoe: '{QOS_STATUS}'
deployability: '{DEP_STATUS}'
overall_status: '{OVERALL_STATUS}'
critical_issues: { CRITICAL_COUNT }
high_priority_issues: { HIGH_COUNT }
medium_priority_issues: { MEDIUM_COUNT }
concerns: { CONCERNS_COUNT }
blockers: { BLOCKER_BOOLEAN } # true/false
quick_wins: { QUICK_WIN_COUNT }
evidence_gaps: { EVIDENCE_GAP_COUNT }
recommendations:
- '{RECOMMENDATION_1}'
- '{RECOMMENDATION_2}'
- '{RECOMMENDATION_3}'
- Story File: {STORY_FILE_PATH} (if applicable)
- Tech Spec: {TECH_SPEC_PATH} (if available)
- PRD: {PRD_PATH} (if available)
- Test Design: {TEST_DESIGN_PATH} (if available)
- Evidence Sources:
- Test Results: {TEST_RESULTS_DIR}
- Metrics: {METRICS_DIR}
- Logs: {LOGS_DIR}
- CI Results: {CI_RESULTS_PATH}
Recommendations Summary
Release Blocker: {RELEASE_BLOCKER_SUMMARY}
High Priority: {HIGH_PRIORITY_SUMMARY}
Medium Priority: {MEDIUM_PRIORITY_SUMMARY}
Next Steps: {NEXT_STEPS_DESCRIPTION}
Sign-Off
NFR Evidence Audit:
- Overall Status: {OVERALL_STATUS} {OVERALL_ICON}
- Critical Issues: {CRITICAL_COUNT}
- High Priority Issues: {HIGH_COUNT}
- Concerns: {CONCERNS_COUNT}
- Evidence Gaps: {EVIDENCE_GAP_COUNT}
Gate Status: {GATE_STATUS} {GATE_ICON}
Next Actions:
- If PASS ✅: Proceed to
*gate workflow or release
- If CONCERNS ⚠️: Address HIGH/CRITICAL issues, re-run
*nfr-assess
- If FAIL ❌: Resolve FAIL status NFRs, re-run
*nfr-assess
Generated: {DATE}
Workflow: testarch-nfr v5.0