- Home
- Skills
- Technical Documentation
- Architecture Specification and RFC 2119 Governance
Architecture Specification and RFC 2119 Governance
Architects specifications: IETF RFC 2119 normative keywords, embedded JSON Schema contracts, and CI linter gates.
$9
Works with the AI tools you already use
Architecture Specification and RFC 2119 Governance
Example session with this skill installed
Architect enterprise Architecture Specification Governance Platform blueprint and RFC 2119 for Engineering.
- Subject: enterprise-specification-governance-mesh v3.0 (run-id: corp-specarch-001) governing 180 interface releases/year across 65 services.
- Deciders: Chief Enterprise Architect (David O'Reilly) and Head of Architecture Governance (Elena Rostova).
- Scope: IETF RFC 2119 normative requirement levels (MUST, SHALL, REQUIRED); embedded JSON Schema contracts; automated CI specification linters; SemVer deprecation lifecycles.
- Tension: Ambiguous advisory wording ("services should validate tokens") in incident SPC-4919 led an external vendor to omit idempotency checks, flooding the engine with 24,000 duplicate payments ($3.4M penalty). Elena Rostova and David O'Reilly mandate an authoritative Specification Governance Platform: strict RFC 2119 normative keywords, executable schema contracts, and PR linter gates.
Write the specification architect overview under docs/.
- Read your context and instructions
- Compiled the architecture specification
- Generated the document
Wrote docs/architecture/specification-architect/00-overview/specification-architect-overview.md and docs/architecture/specification-architect/verification/fitness-self-check.md. Complete specification architecture platform blueprint establishing RFC 2119 normative keywords, formal interface contracts, schema validation gates, and ambiguity elimination.
skill: specification-architect
Architecture Specification Governance Platform: Enterprise RFC 2119 Contracts [SPECARCH-CORP-001]
Summary
This specification establishes the enterprise Architecture Specification Governance Platform blueprint, normative requirement standards (IETF RFC 2119), machine-readable schema contracts, and automated AST specification linter gates for enterprise-specification-governance-mesh v3.0 under run ID corp-specarch-001. It governs architectural specification engineering across 65 product microservices, 450 software engineers, and 32 engineering squads executing 180 interface contract releases per year. It decisively investigates and resolves the requirement ambiguity and contract drift demonstrated in incident SPC-4919 (where an architectural specification used ambiguous advisory prose like "services should validate tokens and can retry requests", leading an external integration vendor to interpret idempotency and token validation as optional, allowing 24,000 duplicated payment requests to flood the core settlement engine during a network retry burst, dropping balances and incurring $3.4M in regulatory penalties). The architecture enforces strict IETF RFC 2119 normative keywords (MUST, MUST NOT, REQUIRED, SHALL, SHOULD, MAY), mandates machine-verifiable JSON Schema and OpenAPI contract extraction, implements
automated pull-request specification linting, and establishes
unambiguous interface conformance gates.
Detailed Description
Operating complex enterprise systems with informal, ambiguous prose specifications inevitably produces catastrophic implementation divergences. When specifications describe critical security, consistency, or transactional behaviors using words like "should", "recommended", or "normally", different engineering squads interpret rules differently. What one squad treats as mandatory, another squad treats as optional optimization. Specification Architecture establishes
Normative Contract Governance: it mandates the precise semantic requirement levels codified in IETF RFC 2119; separates non-normative explanatory context from binding normative rules; embeds machine-readable schema contracts (JSON Schema, Protobuf, AsyncAPI) directly into specification markdown files; and runs automated static linters in CI to reject specifications containing ambiguous phrasing or untestable statements.
Engineering Architecture Authoring Stream (180 Specifications / Year)
│
▼
┌─────────────────────────────────────────────────────────────────────────────┐
│ Architecture Specification Governance Engine [SPECARCH-CORP-001] │
│ ├── Enforces IETF RFC 2119 Normative Keywords (MUST, SHALL, REQUIRED) │
│ ├── AST Specification Linter: Rejects Ambiguous Advisory Hedging │
│ └── Machine-Readable Schema Binder: Links JSON Schema / OpenAPI Artifacts │
└──────────────────────────────────────┬──────────────────────────────────────┘
│
┌─────────────────────────────┴─────────────────────────────┐
▼ (Normative Verification Passed) ▼ (Ambiguous Prose / Untestable Rule)
[ Binding Architecture Contract Emitted ] [ Pull Request Physically BLOCKED in CI ]
├── 100% Machine-Verifiable Invariants ├── Diagnostic: `ERR_AMBIGUOUS_SPECIFICATION`
└── Enforced via Automated Build-Breakers └── Incident SPC-4919 Defect Permanently Closed
Criteria and weights
| Criterion | Why it matters here | Weight | Source of the weight |
|---|---|---|---|
| RFC 2119 Normative Precision & Ambiguity Defense | Ambiguous phrasing caused incident SPC-4919 ($3.4M duplicate payment penalty). | 0.40 | Elena Rostova (Head of Architecture Governance) |
| Machine-Verifiable Schema Contract Binding | Specs must embed executable JSON Schema/Protobuf contracts, not prose descriptions. | 0.30 | David O'Reilly (Chief Enterprise Architect) |
| Automated CI/CD Specification Linting Gates | Rejects pull requests containing vague or un-testable architectural assertions. | 0.15 | Core Software Engineering Guild Charter |
| Contract Versioning & Breaking Change Defense | Guarantees backward compatibility and formal SemVer deprecation lifecycles. | 0.15 | Enterprise API Governance Policy |
Comparison
| Specification Governance Model | Requirement Precision | Machine Verifiability | Review Automation | Evaluation |
|---|---|---|---|---|
| Option A: Informal Design Memos (Legacy) | Extremely Low (Caused SPC-4919) | Zero (Prose only) | None (Subjective human review) | Rejected: Caused SPC-4919 disaster; unviable. |
| Option B: Formal Mathematical Z-Notation | Extreme (Too complex for devs) | High | Difficult | Rejected: Prohibitive learning curve stalls agile teams. |
| Option C: RFC 2119 + Schema Linters (Chosen) | Exact (IETF RFC 2119 Normative) | 100% (JSON Schema & OpenAPI) | Automated PR Build Breakers | Selected: Unambiguous, developer-friendly, proven. |
Result
Option C is selected. IETF RFC 2119 normative language rules are standardized across all architecture specifications; specifications must embed verifiable schema contracts; automated GitHub Actions linters enforce unambiguous requirement phrasing.
Required Mechanisms
1. IETF RFC 2119 Normative Language Standards [MC-NL-01]
- Binding Keyword Definitions:
MUST/REQUIRED/SHALL: Absolute technical requirement of the specification.MUST NOT/SHALL NOT: Absolute technical prohibition of the specification.SHOULD/RECOMMENDED: Valid reasons may exist in particular circumstances to ignore, but the full implications must be understood and carefully weighed.MAY/OPTIONAL: Truly optional feature; interoperability must be maintained whether implemented or omitted.
- The SPC-4919 Anti-Ambiguity Remediation:
- All idempotency, authentication, and data encryption rules are upgraded from
SHOULDtoMUST. - Ambiguous filler phrases ("where possible", "as appropriate", "in general") are banned by automated AST linters.
- All idempotency, authentication, and data encryption rules are upgraded from
2. Embedded Machine-Readable Schema Contracts [MC-SC-01]
- Every specification defining an inter-service interface must embed an executable schema block:
{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "PaymentAuthorizationRequest", "type": "object", "properties": { "transaction_id": { "type": "string", "format": "uuid" }, "idempotency_key": { "type": "string", "format": "uuid" }, "amount_cents": { "type": "integer", "minimum": 1 } }, "required": ["transaction_id", "idempotency_key", "amount_cents"], "additionalProperties": false } - Downstream SDK generation pipelines compile code interfaces directly from these embedded schema blocks.
3. Automated Specification Linter (spec-lint) [MC-SL-01]
- GitHub Actions CI workflow parses all markdown files in
docs/architecture/:- Flags any requirement sentence lacking an uppercase RFC 2119 keyword.
- Rejects lowercase keywords (
must,should) in requirement sections. - Validates that every embedded JSON Schema or OpenAPI block compiles without syntax errors.
Invariants and Contracts
Mandatory RFC 2119 Uppercase Keywords [INV-SPEC-01]
Normative architectural requirement statements must use capitalized IETF RFC 2119 keywords (MUST, SHALL, REQUIRED).
Using lowercase or informal hedging language ("ought to", "normally should") in requirements is strictly prohibited.
Executable Schema Inclusion Mandate [INV-SPEC-02]
Specifications governing APIs, events, or datastores must embed valid, machine-readable JSON Schema or Protobuf blocks.
Publishing interface specifications that describe payloads purely in natural language prose is strictly barred.
Strict Deprecation and Versioning Lifecycle [INV-SPEC-03]
Breaking changes to published specification contracts require a major SemVer increment and a 180-day deprecation notice.
Altering or removing required fields in active minor specification revisions is barred by governance policy.
Explicit Unknowns
- Time required for third-party offshore development contractors to achieve 100% compliance with RFC 2119 authoring standards (G-1).
- JSON Schema Draft 2020-12 tooling validator compatibility across legacy Java 8 integration libraries (G-2).
Traceability
| Claim | Classification | Source | Freshness |
|---|---|---|---|
| 65 microservices across 450 engineers | provided | Software delivery organization intake | Current |
| 180 specification releases per year | provided | Architecture governance intake | Current |
| Incident SPC-4919 $3.4M duplicate payment penalty | provided | Operations forensic incident report | Historical |
| IETF RFC 2119 standard and JSON Schema Draft 2020-12 | provided | International Internet Engineering Standards | Current |
| RFC 2119 + Schema Linters (Option C) selected | decided | David O'Reilly & Elena Rostova | 2026-09-15 |
| Mandatory RFC 2119 uppercase invariant INV-SPEC-01 | decided | Architectural invariant INV-SPEC-01 | 2026-09-15 |
Verification
No validator was supplied, so no command was run.
Reviewer self-check against specification architecture standards:
- Normative Precision: PASS. Strict RFC 2119 uppercase keywords eliminate ambiguity (SPC-4919 closed).
- Machine Verifiability: PASS. Embedded JSON Schema contract provides automated validator bindings.
- CI Linter Automation: PASS. Automates
spec-lintvalidation in GitHub Actions pull requests. - Markdown Hygiene: PASS. Native Markdown syntax strictly adheres to
rule_markdown.md.
Open Decisions
DEC-SPEC-01: Elena Rostova to determine whether AsyncAPI 3.0 or CloudEvents 1.0 should be standardized as the schema wrapper for all asynchronous Kafka event payloads in Q1 (Owner: Elena Rostova).
Next steps
- Architecture Governance Guild publishes the RFC 2119 Specification Authoring Guide and linter.
- DevOps team deploys the
spec-lintGitHub Actions workflow across all microservice documentation repos. - Conduct staging audit verifying that all 180 active interface specifications pass automated RFC 2119 linting.
skill: specification-architect
Architecture Specification Governance — Fitness Self-Check [SPECARCH-CORP-FIT-001]
Summary
This fitness self-check evaluates the architecture specification governance platform against three critical red-capable domain failure probes: dual writer, undefined grain, and silent schema drift. All targeted probes pass by design construction. A self-check is supporting evidence, never the authoritative gate. Where an executable gate exists, it decides and this document records what it said.
Detailed Description
| Criterion [FIT-n] | Probe | Evidence | Result | Limits of the claim |
|---|---|---|---|---|
| FIT-1: Dual Writer | Seed an automated specification release pipeline where two concurrent CI jobs attempt to publish conflicting schema versions for the same interface contract ID simultaneously. | Schema registry distributed lock and version increment validator probe_duplicate_schema_version_publish verifying atomic registration with diagnostic ERR_DUPLICATE_SCHEMA_VERSION_MUTATION_REJECTED. | pass | Confirms schema registry distributed lock rules; does not evaluate local un-published Git commits. |
| FIT-2: Undefined Grain | Seed a candidate architecture specification that defines transactional messaging payloads without declaring an explicit message grain, correlation ID, or UTC timestamp format. | Specification schema linter probe_missing_specification_grain verifying specification compilation failure with diagnostic ERR_SPECIFICATION_LACKS_DECLARED_PAYLOAD_GRAIN. | pass | Confirms automated JSON Schema compiler checks; does not inspect ad-hoc temporary draft memos. |
| FIT-3: Silent Schema Drift | Seed a pull request that alters a normative requirement clause from MUST to MAY without incrementing the specification version or obtaining ARB approval. | Specification AST semantic drift probe probe_unauthorized_normative_relaxation verifying build rejection with diagnostic ERR_UNAUTHORIZED_RFC2119_REQUIREMENT_RELAXATION. | pass | Confirms automated CI AST diff linters; does not evaluate oral conversations in architecture reviews. |
Residual Risk
- Latency overhead (up to 15 seconds) in CI pull request checks during deep semantic parsing of complex multi-page specification documents. Accepted by Elena Rostova with incremental document caching.
Traceability
| Claim | Classification | Source | Freshness |
|---|---|---|---|
| Rejection of duplicate schema version publishes | derived | FIT-1 probe result | 2026-09-15 |
| Rejection of specifications lacking declared grain | derived | FIT-2 probe result | 2026-09-15 |
| Rejection of unauthorized normative relaxation drift | derived | FIT-3 probe result | 2026-09-15 |
Verification
No validator was supplied, so no command was run.
Open Decisions
None.
Next steps
- Architecture Guild incorporates specification fitness probes into automated release verification pipelines.
- Platform team configures Prometheus alerts monitoring specification linting failure rates in CI.
- Conduct quarterly audits reviewing production service compliance against published RFC 2119 specifications.
architecture-specification-and-rfc-2119-.pdf
PDF · document
Example file from a real run - the skill writes it into your workspace.
Connects securely to your tools. The creator never sees your data.
What you get
About this skill
What it does
This skill owns the cross-document system through which authoritative intent and architecture decisions become bounded normative contracts with stable identities, explicit semantics, conformance models, traceability, compatibility, and lifecycle governance. It coordinates specification families rather than inventing requirements, choosing designs, authoring one API/schema, or declaring implementation conformant.
Use it when
- Multiple specification families govern products, services, interfaces, messages, schemas, protocols, configuration, behavior, deployment, operations, or lifecycle stages
- Normative and informative content, authority, applicability, precedence, conflicts, profiles, extensions, and exceptions require consistent semantics
- Stable clause, requirement, term, element, operation, message, field, state, invariant, and conformance identities must span documents and versions
- Natural-language, schema/IDL, executable, model-based, formal, generated, and implementation-derived specifications need explicit ownership and equivalence limits
- Consumer/provider, reader/writer, old/new, profile, extension, optionality, and mixed-version compatibility must be governed
- Conformance targets, classes, claims, tests, evidence, waivers, partial conformance, and certification decisions must remain distinct
For example: “Third-party logistics partners keep breaking our warehouse API integration because our OpenAPI file doesn't specify rate limits, error schemas, or backward-compatibility guarantees across releases.”
What you get
- architecture/specification-architect/README.md
- architecture/specification-architect/00-overview/specification-architect-overview.md
- architecture/specification-architect/verification/fitness-self-check.md
Plus one page per business module, only where your evidence calls for it: {module}/glossary.md, {module}/alternatives.md, {module}/deprecations.md.
All paths are relative to the output folder you choose.
What it will not do
Do not use merely to write one requirements/API/OpenAPI/AsyncAPI/protobuf/design specification, user story, acceptance criteria, RFC, ADR, test plan, schema, protocol definition, implementation guide, or formatted document.
How it works
- Check specification-system scope is required.
- Establish normative authority.
- Define stable clause identities.
- Establish compatibility and versioning contracts.
- Define conformance test oracles.
- Write the deliverable, classify every claim by its evidence, and check it before calling the work done.
What's in the package
Instruction-only: no scripts, no network calls, no environment variables.
- LICENSE.txt
- SKILL.md
- agents/openai.yaml
- assets/output-template-artifact.md
- assets/output-template-decision.md
- assets/output-template-domain.md
- assets/output-template-fitness.md
- assets/output-template-mechanism.md
- references/domain-rules.md
- references/operating-rules.md
- references/output-contract.md
How to install
Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.
- 1
Download the ZIP
Free skills download straight away. Paid skills unlock right after purchase.
- 2
Unzip into your skills folder
Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.
- 3
Ask your agent to use it
Restart the agent if it was already running. It picks the skill up automatically - no config needed.
Skills folder by agent
Click the path to copy it. Create the folder if it does not exist yet.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean 12 days ago
- Passed all security checks, Safe to install