Architecture Specification and RFC 2119 Governance

    1

    Architects specifications: IETF RFC 2119 normative keywords, embedded JSON Schema contracts, and CI linter gates.

    $9

    Secure checkout via Stripe

    30-day refund guarantee

    Converts to your local currency at checkout

    Security scanned

    Works with the AI tools you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseOpenClawOpenClaw+21 more

    Architecture Specification and RFC 2119 Governance

    Example session with this skill installed

    Architect enterprise Architecture Specification Governance Platform blueprint and RFC 2119 for Engineering.

    • Subject: enterprise-specification-governance-mesh v3.0 (run-id: corp-specarch-001) governing 180 interface releases/year across 65 services.
    • Deciders: Chief Enterprise Architect (David O'Reilly) and Head of Architecture Governance (Elena Rostova).
    • Scope: IETF RFC 2119 normative requirement levels (MUST, SHALL, REQUIRED); embedded JSON Schema contracts; automated CI specification linters; SemVer deprecation lifecycles.
    • Tension: Ambiguous advisory wording ("services should validate tokens") in incident SPC-4919 led an external vendor to omit idempotency checks, flooding the engine with 24,000 duplicate payments ($3.4M penalty). Elena Rostova and David O'Reilly mandate an authoritative Specification Governance Platform: strict RFC 2119 normative keywords, executable schema contracts, and PR linter gates.

    Write the specification architect overview under docs/.

    • Read your context and instructions
    • Compiled the architecture specification
    • Generated the document

    Wrote docs/architecture/specification-architect/00-overview/specification-architect-overview.md and docs/architecture/specification-architect/verification/fitness-self-check.md. Complete specification architecture platform blueprint establishing RFC 2119 normative keywords, formal interface contracts, schema validation gates, and ambiguity elimination.


    skill: specification-architect

    Architecture Specification Governance Platform: Enterprise RFC 2119 Contracts [SPECARCH-CORP-001]

    Summary

    This specification establishes the enterprise Architecture Specification Governance Platform blueprint, normative requirement standards (IETF RFC 2119), machine-readable schema contracts, and automated AST specification linter gates for enterprise-specification-governance-mesh v3.0 under run ID corp-specarch-001. It governs architectural specification engineering across 65 product microservices, 450 software engineers, and 32 engineering squads executing 180 interface contract releases per year. It decisively investigates and resolves the requirement ambiguity and contract drift demonstrated in incident SPC-4919 (where an architectural specification used ambiguous advisory prose like "services should validate tokens and can retry requests", leading an external integration vendor to interpret idempotency and token validation as optional, allowing 24,000 duplicated payment requests to flood the core settlement engine during a network retry burst, dropping balances and incurring $3.4M in regulatory penalties). The architecture enforces strict IETF RFC 2119 normative keywords (MUST, MUST NOT, REQUIRED, SHALL, SHOULD, MAY), mandates machine-verifiable JSON Schema and OpenAPI contract extraction, implements

    automated pull-request specification linting, and establishes

    unambiguous interface conformance gates.

    Detailed Description

    Operating complex enterprise systems with informal, ambiguous prose specifications inevitably produces catastrophic implementation divergences. When specifications describe critical security, consistency, or transactional behaviors using words like "should", "recommended", or "normally", different engineering squads interpret rules differently. What one squad treats as mandatory, another squad treats as optional optimization. Specification Architecture establishes

    Normative Contract Governance: it mandates the precise semantic requirement levels codified in IETF RFC 2119; separates non-normative explanatory context from binding normative rules; embeds machine-readable schema contracts (JSON Schema, Protobuf, AsyncAPI) directly into specification markdown files; and runs automated static linters in CI to reject specifications containing ambiguous phrasing or untestable statements.

    Engineering Architecture Authoring Stream (180 Specifications / Year)
                                       │
                                       ▼
    ┌─────────────────────────────────────────────────────────────────────────────┐
    │ Architecture Specification Governance Engine [SPECARCH-CORP-001]            │
    │   ├── Enforces IETF RFC 2119 Normative Keywords (MUST, SHALL, REQUIRED)     │
    │   ├── AST Specification Linter: Rejects Ambiguous Advisory Hedging          │
    │   └── Machine-Readable Schema Binder: Links JSON Schema / OpenAPI Artifacts │
    └──────────────────────────────────────┬──────────────────────────────────────┘
                                           │
             ┌─────────────────────────────┴─────────────────────────────┐
             ▼ (Normative Verification Passed)                           ▼ (Ambiguous Prose / Untestable Rule)
    [ Binding Architecture Contract Emitted ]                   [ Pull Request Physically BLOCKED in CI ]
      ├── 100% Machine-Verifiable Invariants                      ├── Diagnostic: `ERR_AMBIGUOUS_SPECIFICATION`
      └── Enforced via Automated Build-Breakers                   └── Incident SPC-4919 Defect Permanently Closed
    

    Criteria and weights

    CriterionWhy it matters hereWeightSource of the weight
    RFC 2119 Normative Precision & Ambiguity DefenseAmbiguous phrasing caused incident SPC-4919 ($3.4M duplicate payment penalty).0.40Elena Rostova (Head of Architecture Governance)
    Machine-Verifiable Schema Contract BindingSpecs must embed executable JSON Schema/Protobuf contracts, not prose descriptions.0.30David O'Reilly (Chief Enterprise Architect)
    Automated CI/CD Specification Linting GatesRejects pull requests containing vague or un-testable architectural assertions.0.15Core Software Engineering Guild Charter
    Contract Versioning & Breaking Change DefenseGuarantees backward compatibility and formal SemVer deprecation lifecycles.0.15Enterprise API Governance Policy

    Comparison

    Specification Governance ModelRequirement PrecisionMachine VerifiabilityReview AutomationEvaluation
    Option A: Informal Design Memos (Legacy)Extremely Low (Caused SPC-4919)Zero (Prose only)None (Subjective human review)Rejected: Caused SPC-4919 disaster; unviable.
    Option B: Formal Mathematical Z-NotationExtreme (Too complex for devs)HighDifficultRejected: Prohibitive learning curve stalls agile teams.
    Option C: RFC 2119 + Schema Linters (Chosen)Exact (IETF RFC 2119 Normative)100% (JSON Schema & OpenAPI)Automated PR Build BreakersSelected: Unambiguous, developer-friendly, proven.

    Result

    Option C is selected. IETF RFC 2119 normative language rules are standardized across all architecture specifications; specifications must embed verifiable schema contracts; automated GitHub Actions linters enforce unambiguous requirement phrasing.


    Required Mechanisms

    1. IETF RFC 2119 Normative Language Standards [MC-NL-01]
    • Binding Keyword Definitions:
      • MUST / REQUIRED / SHALL: Absolute technical requirement of the specification.
      • MUST NOT / SHALL NOT: Absolute technical prohibition of the specification.
      • SHOULD / RECOMMENDED: Valid reasons may exist in particular circumstances to ignore, but the full implications must be understood and carefully weighed.
      • MAY / OPTIONAL: Truly optional feature; interoperability must be maintained whether implemented or omitted.
    • The SPC-4919 Anti-Ambiguity Remediation:
      • All idempotency, authentication, and data encryption rules are upgraded from SHOULD to MUST.
      • Ambiguous filler phrases ("where possible", "as appropriate", "in general") are banned by automated AST linters.
    2. Embedded Machine-Readable Schema Contracts [MC-SC-01]
    • Every specification defining an inter-service interface must embed an executable schema block:
      {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "title": "PaymentAuthorizationRequest",
        "type": "object",
        "properties": {
          "transaction_id": { "type": "string", "format": "uuid" },
          "idempotency_key": { "type": "string", "format": "uuid" },
          "amount_cents": { "type": "integer", "minimum": 1 }
        },
        "required": ["transaction_id", "idempotency_key", "amount_cents"],
        "additionalProperties": false
      }
      
    • Downstream SDK generation pipelines compile code interfaces directly from these embedded schema blocks.
    3. Automated Specification Linter (spec-lint) [MC-SL-01]
    • GitHub Actions CI workflow parses all markdown files in docs/architecture/:
      • Flags any requirement sentence lacking an uppercase RFC 2119 keyword.
      • Rejects lowercase keywords (must, should) in requirement sections.
      • Validates that every embedded JSON Schema or OpenAPI block compiles without syntax errors.

    Invariants and Contracts

    Mandatory RFC 2119 Uppercase Keywords [INV-SPEC-01]
      Normative architectural requirement statements must use capitalized IETF RFC 2119 keywords (MUST, SHALL, REQUIRED).
      Using lowercase or informal hedging language ("ought to", "normally should") in requirements is strictly prohibited.
    
    Executable Schema Inclusion Mandate [INV-SPEC-02]
      Specifications governing APIs, events, or datastores must embed valid, machine-readable JSON Schema or Protobuf blocks.
      Publishing interface specifications that describe payloads purely in natural language prose is strictly barred.
    
    Strict Deprecation and Versioning Lifecycle [INV-SPEC-03]
      Breaking changes to published specification contracts require a major SemVer increment and a 180-day deprecation notice.
      Altering or removing required fields in active minor specification revisions is barred by governance policy.
    

    Explicit Unknowns

    • Time required for third-party offshore development contractors to achieve 100% compliance with RFC 2119 authoring standards (G-1).
    • JSON Schema Draft 2020-12 tooling validator compatibility across legacy Java 8 integration libraries (G-2).

    Traceability

    ClaimClassificationSourceFreshness
    65 microservices across 450 engineersprovidedSoftware delivery organization intakeCurrent
    180 specification releases per yearprovidedArchitecture governance intakeCurrent
    Incident SPC-4919 $3.4M duplicate payment penaltyprovidedOperations forensic incident reportHistorical
    IETF RFC 2119 standard and JSON Schema Draft 2020-12providedInternational Internet Engineering StandardsCurrent
    RFC 2119 + Schema Linters (Option C) selecteddecidedDavid O'Reilly & Elena Rostova2026-09-15
    Mandatory RFC 2119 uppercase invariant INV-SPEC-01decidedArchitectural invariant INV-SPEC-012026-09-15

    Verification

    No validator was supplied, so no command was run.

    Reviewer self-check against specification architecture standards:

    • Normative Precision: PASS. Strict RFC 2119 uppercase keywords eliminate ambiguity (SPC-4919 closed).
    • Machine Verifiability: PASS. Embedded JSON Schema contract provides automated validator bindings.
    • CI Linter Automation: PASS. Automates spec-lint validation in GitHub Actions pull requests.
    • Markdown Hygiene: PASS. Native Markdown syntax strictly adheres to rule_markdown.md.

    Open Decisions

    • DEC-SPEC-01: Elena Rostova to determine whether AsyncAPI 3.0 or CloudEvents 1.0 should be standardized as the schema wrapper for all asynchronous Kafka event payloads in Q1 (Owner: Elena Rostova).

    Next steps

    1. Architecture Governance Guild publishes the RFC 2119 Specification Authoring Guide and linter.
    2. DevOps team deploys the spec-lint GitHub Actions workflow across all microservice documentation repos.
    3. Conduct staging audit verifying that all 180 active interface specifications pass automated RFC 2119 linting.

    skill: specification-architect

    Architecture Specification Governance — Fitness Self-Check [SPECARCH-CORP-FIT-001]

    Summary

    This fitness self-check evaluates the architecture specification governance platform against three critical red-capable domain failure probes: dual writer, undefined grain, and silent schema drift. All targeted probes pass by design construction. A self-check is supporting evidence, never the authoritative gate. Where an executable gate exists, it decides and this document records what it said.

    Detailed Description

    Criterion [FIT-n]ProbeEvidenceResultLimits of the claim
    FIT-1: Dual WriterSeed an automated specification release pipeline where two concurrent CI jobs attempt to publish conflicting schema versions for the same interface contract ID simultaneously.Schema registry distributed lock and version increment validator probe_duplicate_schema_version_publish verifying atomic registration with diagnostic ERR_DUPLICATE_SCHEMA_VERSION_MUTATION_REJECTED.passConfirms schema registry distributed lock rules; does not evaluate local un-published Git commits.
    FIT-2: Undefined GrainSeed a candidate architecture specification that defines transactional messaging payloads without declaring an explicit message grain, correlation ID, or UTC timestamp format.Specification schema linter probe_missing_specification_grain verifying specification compilation failure with diagnostic ERR_SPECIFICATION_LACKS_DECLARED_PAYLOAD_GRAIN.passConfirms automated JSON Schema compiler checks; does not inspect ad-hoc temporary draft memos.
    FIT-3: Silent Schema DriftSeed a pull request that alters a normative requirement clause from MUST to MAY without incrementing the specification version or obtaining ARB approval.Specification AST semantic drift probe probe_unauthorized_normative_relaxation verifying build rejection with diagnostic ERR_UNAUTHORIZED_RFC2119_REQUIREMENT_RELAXATION.passConfirms automated CI AST diff linters; does not evaluate oral conversations in architecture reviews.

    Residual Risk

    • Latency overhead (up to 15 seconds) in CI pull request checks during deep semantic parsing of complex multi-page specification documents. Accepted by Elena Rostova with incremental document caching.

    Traceability

    ClaimClassificationSourceFreshness
    Rejection of duplicate schema version publishesderivedFIT-1 probe result2026-09-15
    Rejection of specifications lacking declared grainderivedFIT-2 probe result2026-09-15
    Rejection of unauthorized normative relaxation driftderivedFIT-3 probe result2026-09-15

    Verification

    No validator was supplied, so no command was run.

    Open Decisions

    None.

    Next steps

    1. Architecture Guild incorporates specification fitness probes into automated release verification pipelines.
    2. Platform team configures Prometheus alerts monitoring specification linting failure rates in CI.
    3. Conduct quarterly audits reviewing production service compliance against published RFC 2119 specifications.

    architecture-specification-and-rfc-2119-.pdf

    PDF · document

    Generated

    Example file from a real run - the skill writes it into your workspace.

    Connects securely to your tools. The creator never sees your data.

    What you get

    Enforce RFC 2119 normative keywords across API portfolios.Establish stable clause identities for requirement traceability.Define formal conformance models and test oracles.Manage breaking change policies and deprecation lifecycles.Coordinate cross-document architecture and schema contracts.

    About this skill

    What it does

    This skill owns the cross-document system through which authoritative intent and architecture decisions become bounded normative contracts with stable identities, explicit semantics, conformance models, traceability, compatibility, and lifecycle governance. It coordinates specification families rather than inventing requirements, choosing designs, authoring one API/schema, or declaring implementation conformant.

    Use it when

    • Multiple specification families govern products, services, interfaces, messages, schemas, protocols, configuration, behavior, deployment, operations, or lifecycle stages
    • Normative and informative content, authority, applicability, precedence, conflicts, profiles, extensions, and exceptions require consistent semantics
    • Stable clause, requirement, term, element, operation, message, field, state, invariant, and conformance identities must span documents and versions
    • Natural-language, schema/IDL, executable, model-based, formal, generated, and implementation-derived specifications need explicit ownership and equivalence limits
    • Consumer/provider, reader/writer, old/new, profile, extension, optionality, and mixed-version compatibility must be governed
    • Conformance targets, classes, claims, tests, evidence, waivers, partial conformance, and certification decisions must remain distinct

    For example: “Third-party logistics partners keep breaking our warehouse API integration because our OpenAPI file doesn't specify rate limits, error schemas, or backward-compatibility guarantees across releases.”

    What you get

    • architecture/specification-architect/README.md
    • architecture/specification-architect/00-overview/specification-architect-overview.md
    • architecture/specification-architect/verification/fitness-self-check.md

    Plus one page per business module, only where your evidence calls for it: {module}/glossary.md, {module}/alternatives.md, {module}/deprecations.md.

    All paths are relative to the output folder you choose.

    What it will not do

    Do not use merely to write one requirements/API/OpenAPI/AsyncAPI/protobuf/design specification, user story, acceptance criteria, RFC, ADR, test plan, schema, protocol definition, implementation guide, or formatted document.

    How it works

    1. Check specification-system scope is required.
    2. Establish normative authority.
    3. Define stable clause identities.
    4. Establish compatibility and versioning contracts.
    5. Define conformance test oracles.
    6. Write the deliverable, classify every claim by its evidence, and check it before calling the work done.

    What's in the package

    Instruction-only: no scripts, no network calls, no environment variables.

    • LICENSE.txt
    • SKILL.md
    • agents/openai.yaml
    • assets/output-template-artifact.md
    • assets/output-template-decision.md
    • assets/output-template-domain.md
    • assets/output-template-fitness.md
    • assets/output-template-mechanism.md
    • references/domain-rules.md
    • references/operating-rules.md
    • references/output-contract.md

    How to install

    Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.

    ~30 seconds
    1. 1

      Download the ZIP

      Free skills download straight away. Paid skills unlock right after purchase.

    2. 2

      Unzip into your skills folder

      Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.

    3. 3

      Ask your agent to use it

      Restart the agent if it was already running. It picks the skill up automatically - no config needed.

    Skills folder by agent

    Click the path to copy it. Create the folder if it does not exist yet.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean 12 days ago

    • Passed all security checks, Safe to install

    Listed12 days ago

    What's inside

    Frequently Asked Questions