Governance Highlights Summary
Every highlight bullet from the 9 pages in this section, gathered on one page and grouped by the page it came from.
- Governance trades a small amount of local autonomy for fleet-wide predictability, once a team crosses roughly a handful of services
- It governs outcomes and interfaces, not every implementation choice inside a service
- Automated enforcement (CI, bots, dashboards) is what makes governance scale without a human bottleneck
- An exception without an expiry date is permanent debt wearing a temporary label
- Ruff enforces style in CI
- Typed public APIs on new modules
- Domain logic free of framework imports
- Consistent project layout per service template
- Exceptions: document in ADR, not silently ignore
- Docs live in repo beside code
- ADRs numbered and immutable history
- Runbooks linked from alerts
- Specs and RFCs versioned in git
- README is onboarding entry point
- PR template with intent and rollback
- CODEOWNERS for critical paths
- Conventional commits optional but helpful
- Fork workflow for external contributors
- CLA for external IP if applicable
- uv.lock committed; frozen sync in CI
- pip-audit on critical CVEs
- New deps need approval ticket
- SBOM export per release image
- CVE SLA by severity
- Python minor upgrade annually
- Six-month notice for breaking API removals
- EOL calendar in platform roadmap
- Deprecation warnings in logs before removal
- Expand-contract for customer APIs
- Time-box spikes 2-3 days
- Success criteria before starting
- PoC not production without hardening checklist
- ADR to adopt or reject tool
- Consider operability, not only DX
- Scope and impact define level, not years
- Staff spans squads with influence without authority
- Principal sets technical direction multi-quarter
- Python depth remains valuable at all levels
- Written artifacts scale influence
- Standards enforced in CI, not meetings
- ADRs and runbooks in repo
- Locked dependencies and pip-audit
- EOL calendar drives upgrades
- Spikes before fleet tool adoption
Revisado por Chris St. John·Última atualização: 31 de jul. de 2026