Skip to content
Security
Skill

/running-an-architectural-assessment

Phase 2 (Research) deep-dive playbook — drafts the Architectural Assessment.

BOOST
From plugin
ai-plugins
15973 skills4 agents10 commands1 MCP
Install
$ npx -y skills add bitwarden/ai-plugins --skill running-an-architectural-assessment --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.
  • Slash command/running-an-architectural-assessment

Context preview

The summary Claude sees to decide when to auto-load this skill.

Phase 2 (Research) deep-dive playbook — drafts the Architectural Assessment.

SKILL.md

running-an-architectural-assessment.SKILL.md
name: running-an-architectural-assessment
description: Phase 2 (Research) deep-dive playbook — drafts the Architectural Assessment.
when_to_use: Use when an initiative has cleared Phase 1 Identification and the shepherd is producing the Architectural Assessment for Architecture Council. Triggers — "starting Research phase", "drafting the Architectural Assessment", "comparing solution options". Not for PoC (use `running-a-proof-of-concept`).
allowed-tools: Skill, mcp__plugin_bitwarden-atlassian-tools_bitwarden-atlassian__get_issue, mcp__plugin_bitwarden-atlassian-tools_bitwarden-atlassian__get_issue_comments, mcp__plugin_bitwarden-atlassian-tools_bitwarden-atlassian__get_issue_remote_links, mcp__plugin_bitwarden-atlassian-tools_bitwarden-atlassian__search_issues, mcp__plugin_bitwarden-atlassian-tools_bitwarden-atlassian__get_confluence_page, mcp__plugin_bitwarden-atlassian-tools_bitwarden-atlassian__get_confluence_page_comments, mcp__plugin_bitwarden-atlassian-tools_bitwarden-atlassian__search_confluence, mcp__plugin_bitwarden-atlassian-tools_bitwarden-atlassian__search_confluence_cql

Phase 2 (Research) deep-dive playbook for an initiative shepherd. Deliverable: an **Architectural Assessment** — a Confluence page in the EN-space assessments folder that captures the refined problem statement, current state, 2–4 evaluated solution options, and a recommendation with rationale. Time budget: 3–5 weeks, 40–80 hours of shepherd time. Splits into Part A (~weeks 1–2) understanding the problem, Part B (~weeks 3–5) finding the right direction.

Part A: Understanding the Problem (~Weeks 1–2)

Stakeholder Interviews

Interview **3–5 people** affected by or knowledgeable about the problem. Cast wider when the initiative spans many teams or hits operational systems; cast narrower when it's a clear technical question.

Who to talk to:

  • Tech leads on the teams whose codebases will change.
  • Engineers who have hit the problem repeatedly and have working models of it (even if not the tech lead).
  • SRE, BRE, DbOps, AppSec, or QA leads when the problem touches their domain.
  • Anyone who attempted a related approach before — even if it failed. Especially if it failed.

What to ask:

  • "Walk me through how this problem shows up for your team in practice."
  • "What workarounds exist today?"
  • "What attempts were made before and why did they not stick?"
  • "If we did nothing here for another quarter, what changes?"
  • "What constraints — technical, organizational, timing — would shape a solution?"

What to document:

  • Each interviewee's perspective in their own framing (paraphrase but keep their language).
  • Quantified pain wherever possible. "~3 bugs per quarter," "~4 hours per sprint lost to this," "incident on 2026-02-14 traced to this." Vague pain produces vague proposals.
  • Constraints, especially the implicit ones — security commitments, V+/-2 compatibility, self-hosted, multi-client parity.
  • Disagreements between interviewees. They are signal, not noise.

Current-State Analysis

Survey existing implementations across the codebase. The shape of the survey depends on the initiative — error handling, observability, auth, data access, build/test tooling. Look for:

  • **Inconsistencies.** Five teams solving the same problem five ways. Two services with diverged versions of a shared pattern.
  • **Workarounds.** Code that exists only because the desired pattern doesn't. Comments referencing tickets that were never resolved.
  • **Technical debt.** Old patterns left in place because rewriting wasn't worth the cost — but the cost of leaving them is now bigger than the rewrite.
  • **Impact.** Where possible, attach numbers: bug frequency in the area, performance metrics, on-call pages tied to the area, time spent in code review on this kind of code.

Historical Context

  • Read past PRs, design docs, and Slack threads on the topic. Search Confluence for prior assessments in the same problem space.
  • Find earlier shepherds, EMs, or engineers who pushed related work. Brief conversations save weeks of rediscovery.
  • Identify why previous approaches did or did not stick. The reasons usually inform what will succeed this time.

Part B: Finding the Right Direction (~Weeks 3–4)

Solution Research

Research patterns from industry, comparable codebases, and Bitwarden's own prior art. The goal at this stage is **breadth, then trade-offs** — not depth into the favorite.

  • Identify **2–4 candidate approaches**. Fewer than 2 means you skipped the comparison; more than 4 usually means you haven't classified them well.
  • For each approach, document trade-offs explicitly: complexity, migration cost, performance, security posture, operational implications, self-hosted impact, V+/-2 compatibility, who builds the framework, who adopts it.
  • Pair up with current or past shepherds whose initiatives are adjacent. Sharing findings catches dependencies and conflicts early.
  • Bring `Skill(architecting-solutions)` from `bitwarden-delivery-tools` into play when the trade-offs are inside one team's codebase — that skill carries the team-scope architectural judgment heuristics.

Be honest about the leading candidate but write the assessment as if any of the 2–4 might win. If you only document one approach seriously, leadership and Architecture Council can't actually make the decision — they're rubber-stamping yours.

The Architectural Assessment Document

Place under the EN-space assessments folder (the funnel doc links the canonical location). Follow the "Architectural Assessments" template; the sections below are the ones the funnel page specifies.

  • **Problem statement (refined from research).** The version you can write now that you couldn't have written at Identification.
  • **Current state analysis.** Inconsistencies, workarounds, quantified impact. Reference specific code or ticket evidence.
  • **Solution options considered (2–4).** For each: a brief description, key trade-offs, rough effort estimate, risks
Read more
Ships withai-plugins

A curated collection of plugins for AI-assisted development at Bitwarden. Enables discovery and distribution of quality-controlled plugins for use with Claude Code.

Get the whole plugin

Other skills on ai-plugins.